Merge pull request #1358 from TheBlueMatt/2022-03-max-cltv
authorMatt Corallo <649246+TheBlueMatt@users.noreply.github.com>
Thu, 17 Mar 2022 05:13:56 +0000 (05:13 +0000)
committerGitHub <noreply@github.com>
Thu, 17 Mar 2022 05:13:56 +0000 (05:13 +0000)
Make `max_total_cltv_expiry_delta` include the final CLTV

1  2 
lightning/src/ln/functional_tests.rs
lightning/src/routing/router.rs

index 1f64ef0a920efc27a644fb69ee5aacb7e87e45fe,5c0f0c87b3c9b652025288b37867a4271abcad6c..0cdeaabe3644679f1796c398068efd1733cfd854
@@@ -23,7 -23,8 +23,7 @@@ use ln::channelmanager::{ChannelManager
  use ln::channel::{Channel, ChannelError};
  use ln::{chan_utils, onion_utils};
  use ln::chan_utils::{htlc_success_tx_weight, htlc_timeout_tx_weight, HTLCOutputInCommitment};
 -use routing::network_graph::RoutingFees;
 -use routing::router::{PaymentParameters, Route, RouteHop, RouteHint, RouteHintHop, RouteParameters, find_route, get_route};
 +use routing::router::{PaymentParameters, Route, RouteHop, RouteParameters, find_route, get_route};
  use ln::features::{ChannelFeatures, InitFeatures, InvoiceFeatures, NodeFeatures};
  use ln::msgs;
  use ln::msgs::{ChannelMessageHandler, RoutingMessageHandler, ErrorAction};
@@@ -462,6 -463,88 +462,6 @@@ fn test_multi_flight_update_fee() 
        check_added_monitors!(nodes[1], 1);
  }
  
 -fn do_test_1_conf_open(connect_style: ConnectStyle) {
 -      // Previously, if the minium_depth config was set to 1, we'd never send a funding_locked. This
 -      // tests that we properly send one in that case.
 -      let mut alice_config = UserConfig::default();
 -      alice_config.own_channel_config.minimum_depth = 1;
 -      alice_config.channel_options.announced_channel = true;
 -      alice_config.peer_channel_config_limits.force_announced_channel_preference = false;
 -      let mut bob_config = UserConfig::default();
 -      bob_config.own_channel_config.minimum_depth = 1;
 -      bob_config.channel_options.announced_channel = true;
 -      bob_config.peer_channel_config_limits.force_announced_channel_preference = false;
 -      let chanmon_cfgs = create_chanmon_cfgs(2);
 -      let node_cfgs = create_node_cfgs(2, &chanmon_cfgs);
 -      let node_chanmgrs = create_node_chanmgrs(2, &node_cfgs, &[Some(alice_config), Some(bob_config)]);
 -      let mut nodes = create_network(2, &node_cfgs, &node_chanmgrs);
 -      *nodes[0].connect_style.borrow_mut() = connect_style;
 -
 -      let tx = create_chan_between_nodes_with_value_init(&nodes[0], &nodes[1], 100000, 10001, InitFeatures::known(), InitFeatures::known());
 -      mine_transaction(&nodes[1], &tx);
 -      nodes[0].node.handle_funding_locked(&nodes[1].node.get_our_node_id(), &get_event_msg!(nodes[1], MessageSendEvent::SendFundingLocked, nodes[0].node.get_our_node_id()));
 -      assert!(nodes[0].node.get_and_clear_pending_msg_events().is_empty());
 -
 -      mine_transaction(&nodes[0], &tx);
 -      let as_msg_events = nodes[0].node.get_and_clear_pending_msg_events();
 -      assert_eq!(as_msg_events.len(), 2);
 -      let as_funding_locked = if let MessageSendEvent::SendFundingLocked { ref node_id, ref msg } = as_msg_events[0] {
 -              assert_eq!(*node_id, nodes[1].node.get_our_node_id());
 -              msg.clone()
 -      } else { panic!("Unexpected event"); };
 -      if let MessageSendEvent::SendChannelUpdate { ref node_id, msg: _ } = as_msg_events[1] {
 -              assert_eq!(*node_id, nodes[1].node.get_our_node_id());
 -      } else { panic!("Unexpected event"); }
 -
 -      nodes[1].node.handle_funding_locked(&nodes[0].node.get_our_node_id(), &as_funding_locked);
 -      let bs_msg_events = nodes[1].node.get_and_clear_pending_msg_events();
 -      assert_eq!(bs_msg_events.len(), 1);
 -      if let MessageSendEvent::SendChannelUpdate { ref node_id, msg: _ } = bs_msg_events[0] {
 -              assert_eq!(*node_id, nodes[0].node.get_our_node_id());
 -      } else { panic!("Unexpected event"); }
 -
 -      send_payment(&nodes[0], &[&nodes[1]], 100_000);
 -
 -      // After 6 confirmations, as required by the spec, we'll send announcement_signatures and
 -      // broadcast the channel_announcement (but not before exactly 6 confirmations).
 -      connect_blocks(&nodes[0], 4);
 -      assert!(nodes[0].node.get_and_clear_pending_msg_events().is_empty());
 -      connect_blocks(&nodes[0], 1);
 -      nodes[1].node.handle_announcement_signatures(&nodes[0].node.get_our_node_id(), &get_event_msg!(nodes[0], MessageSendEvent::SendAnnouncementSignatures, nodes[1].node.get_our_node_id()));
 -      assert!(nodes[1].node.get_and_clear_pending_msg_events().is_empty());
 -
 -      connect_blocks(&nodes[1], 5);
 -      let bs_announce_events = nodes[1].node.get_and_clear_pending_msg_events();
 -      assert_eq!(bs_announce_events.len(), 2);
 -      let bs_announcement_sigs = if let MessageSendEvent::SendAnnouncementSignatures { ref node_id, ref msg } = bs_announce_events[0] {
 -              assert_eq!(*node_id, nodes[0].node.get_our_node_id());
 -              msg.clone()
 -      } else { panic!("Unexpected event"); };
 -      let (bs_announcement, bs_update) = if let MessageSendEvent::BroadcastChannelAnnouncement { ref msg, ref update_msg } = bs_announce_events[1] {
 -              (msg.clone(), update_msg.clone())
 -      } else { panic!("Unexpected event"); };
 -
 -      nodes[0].node.handle_announcement_signatures(&nodes[1].node.get_our_node_id(), &bs_announcement_sigs);
 -      let as_announce_events = nodes[0].node.get_and_clear_pending_msg_events();
 -      assert_eq!(as_announce_events.len(), 1);
 -      let (announcement, as_update) = if let MessageSendEvent::BroadcastChannelAnnouncement { ref msg, ref update_msg } = as_announce_events[0] {
 -              (msg.clone(), update_msg.clone())
 -      } else { panic!("Unexpected event"); };
 -      assert_eq!(announcement, bs_announcement);
 -
 -      for node in nodes {
 -              assert!(node.net_graph_msg_handler.handle_channel_announcement(&announcement).unwrap());
 -              node.net_graph_msg_handler.handle_channel_update(&as_update).unwrap();
 -              node.net_graph_msg_handler.handle_channel_update(&bs_update).unwrap();
 -      }
 -}
 -#[test]
 -fn test_1_conf_open() {
 -      do_test_1_conf_open(ConnectStyle::BestBlockFirst);
 -      do_test_1_conf_open(ConnectStyle::TransactionsFirst);
 -      do_test_1_conf_open(ConnectStyle::FullBlockViaListen);
 -}
 -
  fn do_test_sanity_on_in_flight_opens(steps: u8) {
        // Previously, we had issues deserializing channels when we hadn't connected the first block
        // after creation. To catch that and similar issues, we lean on the Node::drop impl to test
@@@ -5916,7 -5999,7 +5916,7 @@@ fn bolt2_open_channel_sending_node_chec
        let node_cfgs = create_node_cfgs(2, &chanmon_cfgs);
        let node_chanmgrs = create_node_chanmgrs(2, &node_cfgs, &[None, None]);
        let nodes = create_network(2, &node_cfgs, &node_chanmgrs);
 -      //Force duplicate channel ids
 +      // Force duplicate randomness for every get-random call
        for node in nodes.iter() {
                *node.keys_manager.override_random_bytes.lock().unwrap() = Some([0; 32]);
        }
        nodes[1].node.handle_open_channel(&nodes[0].node.get_our_node_id(), InitFeatures::known(), &node0_to_1_send_open_channel);
        get_event_msg!(nodes[1], MessageSendEvent::SendAcceptChannel, nodes[0].node.get_our_node_id());
  
 -      //Create a second channel with a channel_id collision
 +      // Create a second channel with the same random values. This used to panic due to a colliding
 +      // channel_id, but now panics due to a colliding outbound SCID alias.
        assert!(nodes[0].node.create_channel(nodes[1].node.get_our_node_id(), channel_value_satoshis, push_msat, 42, None).is_err());
  }
  
@@@ -6411,7 -6493,8 +6411,8 @@@ fn test_update_add_htlc_bolt2_sender_cl
        let mut nodes = create_network(2, &node_cfgs, &node_chanmgrs);
        let _chan = create_announced_chan_between_nodes_with_value(&nodes, 0, 1, 1000000, 0, InitFeatures::known(), InitFeatures::known());
  
-       let (route, our_payment_hash, _, our_payment_secret) = get_route_and_payment_hash!(nodes[0], nodes[1], vec![], 100000000, 500000001);
+       let (mut route, our_payment_hash, _, our_payment_secret) = get_route_and_payment_hash!(nodes[0], nodes[1], vec![], 100000000, 0);
+       route.paths[0].last_mut().unwrap().cltv_expiry_delta = 500000001;
        unwrap_send_err!(nodes[0].node.send_payment(&route, our_payment_hash, &Some(our_payment_secret)), true, APIError::RouteError { ref err },
                assert_eq!(err, &"Channel CLTV overflowed?"));
  }
@@@ -7180,10 -7263,7 +7181,10 @@@ fn test_user_configurable_csv_delay() 
        let nodes = create_network(2, &node_cfgs, &node_chanmgrs);
  
        // We test config.our_to_self > BREAKDOWN_TIMEOUT is enforced in Channel::new_outbound()
 -      if let Err(error) = Channel::new_outbound(&&test_utils::TestFeeEstimator { sat_per_kw: Mutex::new(253) }, &nodes[0].keys_manager, nodes[1].node.get_our_node_id(), &InitFeatures::known(), 1000000, 1000000, 0, &low_our_to_self_config, 0) {
 +      if let Err(error) = Channel::new_outbound(&&test_utils::TestFeeEstimator { sat_per_kw: Mutex::new(253) },
 +              &nodes[0].keys_manager, nodes[1].node.get_our_node_id(), &InitFeatures::known(), 1000000, 1000000, 0,
 +              &low_our_to_self_config, 0, 42)
 +      {
                match error {
                        APIError::APIMisuseError { err } => { assert!(regex::Regex::new(r"Configured with an unreasonable our_to_self_delay \(\d+\) putting user funds at risks").unwrap().is_match(err.as_str())); },
                        _ => panic!("Unexpected event"),
        nodes[1].node.create_channel(nodes[0].node.get_our_node_id(), 1000000, 1000000, 42, None).unwrap();
        let mut open_channel = get_event_msg!(nodes[1], MessageSendEvent::SendOpenChannel, nodes[0].node.get_our_node_id());
        open_channel.to_self_delay = 200;
 -      if let Err(error) = Channel::new_from_req(&&test_utils::TestFeeEstimator { sat_per_kw: Mutex::new(253) }, &nodes[0].keys_manager, nodes[1].node.get_our_node_id(), &InitFeatures::known(), &open_channel, 0, &low_our_to_self_config, 0, &nodes[0].logger) {
 +      if let Err(error) = Channel::new_from_req(&&test_utils::TestFeeEstimator { sat_per_kw: Mutex::new(253) },
 +              &nodes[0].keys_manager, nodes[1].node.get_our_node_id(), &InitFeatures::known(), &open_channel, 0,
 +              &low_our_to_self_config, 0, &nodes[0].logger, 42)
 +      {
                match error {
                        ChannelError::Close(err) => { assert!(regex::Regex::new(r"Configured with an unreasonable our_to_self_delay \(\d+\) putting user funds at risks").unwrap().is_match(err.as_str()));  },
                        _ => panic!("Unexpected event"),
        nodes[1].node.create_channel(nodes[0].node.get_our_node_id(), 1000000, 1000000, 42, None).unwrap();
        let mut open_channel = get_event_msg!(nodes[1], MessageSendEvent::SendOpenChannel, nodes[0].node.get_our_node_id());
        open_channel.to_self_delay = 200;
 -      if let Err(error) = Channel::new_from_req(&&test_utils::TestFeeEstimator { sat_per_kw: Mutex::new(253) }, &nodes[0].keys_manager, nodes[1].node.get_our_node_id(), &InitFeatures::known(), &open_channel, 0, &high_their_to_self_config, 0, &nodes[0].logger) {
 +      if let Err(error) = Channel::new_from_req(&&test_utils::TestFeeEstimator { sat_per_kw: Mutex::new(253) },
 +              &nodes[0].keys_manager, nodes[1].node.get_our_node_id(), &InitFeatures::known(), &open_channel, 0,
 +              &high_their_to_self_config, 0, &nodes[0].logger, 42)
 +      {
                match error {
                        ChannelError::Close(err) => { assert!(regex::Regex::new(r"They wanted our payments to be delayed by a needlessly long period\. Upper limit: \d+\. Actual: \d+").unwrap().is_match(err.as_str())); },
                        _ => panic!("Unexpected event"),
@@@ -7497,6 -7571,162 +7498,6 @@@ fn test_announce_disable_channels() 
        assert!(chans_disabled.is_empty());
  }
  
 -#[test]
 -fn test_priv_forwarding_rejection() {
 -      // If we have a private channel with outbound liquidity, and
 -      // UserConfig::accept_forwards_to_priv_channels is set to false, we should reject any attempts
 -      // to forward through that channel.
 -      let chanmon_cfgs = create_chanmon_cfgs(3);
 -      let node_cfgs = create_node_cfgs(3, &chanmon_cfgs);
 -      let mut no_announce_cfg = test_default_channel_config();
 -      no_announce_cfg.channel_options.announced_channel = false;
 -      no_announce_cfg.accept_forwards_to_priv_channels = false;
 -      let node_chanmgrs = create_node_chanmgrs(3, &node_cfgs, &[None, Some(no_announce_cfg), None]);
 -      let persister: test_utils::TestPersister;
 -      let new_chain_monitor: test_utils::TestChainMonitor;
 -      let nodes_1_deserialized: ChannelManager<EnforcingSigner, &test_utils::TestChainMonitor, &test_utils::TestBroadcaster, &test_utils::TestKeysInterface, &test_utils::TestFeeEstimator, &test_utils::TestLogger>;
 -      let mut nodes = create_network(3, &node_cfgs, &node_chanmgrs);
 -
 -      let chan_id_1 = create_announced_chan_between_nodes_with_value(&nodes, 0, 1, 1_000_000, 500_000_000, InitFeatures::known(), InitFeatures::known()).2;
 -
 -      // Note that the create_*_chan functions in utils requires announcement_signatures, which we do
 -      // not send for private channels.
 -      nodes[1].node.create_channel(nodes[2].node.get_our_node_id(), 1_000_000, 500_000_000, 42, None).unwrap();
 -      let open_channel = get_event_msg!(nodes[1], MessageSendEvent::SendOpenChannel, nodes[2].node.get_our_node_id());
 -      nodes[2].node.handle_open_channel(&nodes[1].node.get_our_node_id(), InitFeatures::known(), &open_channel);
 -      let accept_channel = get_event_msg!(nodes[2], MessageSendEvent::SendAcceptChannel, nodes[1].node.get_our_node_id());
 -      nodes[1].node.handle_accept_channel(&nodes[2].node.get_our_node_id(), InitFeatures::known(), &accept_channel);
 -
 -      let (temporary_channel_id, tx, _) = create_funding_transaction(&nodes[1], 1_000_000, 42);
 -      nodes[1].node.funding_transaction_generated(&temporary_channel_id, tx.clone()).unwrap();
 -      nodes[2].node.handle_funding_created(&nodes[1].node.get_our_node_id(), &get_event_msg!(nodes[1], MessageSendEvent::SendFundingCreated, nodes[2].node.get_our_node_id()));
 -      check_added_monitors!(nodes[2], 1);
 -
 -      let cs_funding_signed = get_event_msg!(nodes[2], MessageSendEvent::SendFundingSigned, nodes[1].node.get_our_node_id());
 -      nodes[1].node.handle_funding_signed(&nodes[2].node.get_our_node_id(), &cs_funding_signed);
 -      check_added_monitors!(nodes[1], 1);
 -
 -      let conf_height = core::cmp::max(nodes[1].best_block_info().1 + 1, nodes[2].best_block_info().1 + 1);
 -      confirm_transaction_at(&nodes[1], &tx, conf_height);
 -      connect_blocks(&nodes[1], CHAN_CONFIRM_DEPTH - 1);
 -      confirm_transaction_at(&nodes[2], &tx, conf_height);
 -      connect_blocks(&nodes[2], CHAN_CONFIRM_DEPTH - 1);
 -      let as_funding_locked = get_event_msg!(nodes[1], MessageSendEvent::SendFundingLocked, nodes[2].node.get_our_node_id());
 -      nodes[1].node.handle_funding_locked(&nodes[2].node.get_our_node_id(), &get_event_msg!(nodes[2], MessageSendEvent::SendFundingLocked, nodes[1].node.get_our_node_id()));
 -      get_event_msg!(nodes[1], MessageSendEvent::SendChannelUpdate, nodes[2].node.get_our_node_id());
 -      nodes[2].node.handle_funding_locked(&nodes[1].node.get_our_node_id(), &as_funding_locked);
 -      get_event_msg!(nodes[2], MessageSendEvent::SendChannelUpdate, nodes[1].node.get_our_node_id());
 -
 -      assert!(nodes[0].node.list_usable_channels()[0].is_public);
 -      assert_eq!(nodes[1].node.list_usable_channels().len(), 2);
 -      assert!(!nodes[2].node.list_usable_channels()[0].is_public);
 -
 -      // We should always be able to forward through nodes[1] as long as its out through a public
 -      // channel:
 -      send_payment(&nodes[2], &[&nodes[1], &nodes[0]], 10_000);
 -
 -      // ... however, if we send to nodes[2], we will have to pass the private channel from nodes[1]
 -      // to nodes[2], which should be rejected:
 -      let route_hint = RouteHint(vec![RouteHintHop {
 -              src_node_id: nodes[1].node.get_our_node_id(),
 -              short_channel_id: nodes[2].node.list_channels()[0].short_channel_id.unwrap(),
 -              fees: RoutingFees { base_msat: 1000, proportional_millionths: 0 },
 -              cltv_expiry_delta: MIN_CLTV_EXPIRY_DELTA,
 -              htlc_minimum_msat: None,
 -              htlc_maximum_msat: None,
 -      }]);
 -      let last_hops = vec![route_hint];
 -      let (route, our_payment_hash, our_payment_preimage, our_payment_secret) = get_route_and_payment_hash!(nodes[0], nodes[2], last_hops, 10_000, TEST_FINAL_CLTV);
 -
 -      nodes[0].node.send_payment(&route, our_payment_hash, &Some(our_payment_secret)).unwrap();
 -      check_added_monitors!(nodes[0], 1);
 -      let payment_event = SendEvent::from_event(nodes[0].node.get_and_clear_pending_msg_events().remove(0));
 -      nodes[1].node.handle_update_add_htlc(&nodes[0].node.get_our_node_id(), &payment_event.msgs[0]);
 -      commitment_signed_dance!(nodes[1], nodes[0], payment_event.commitment_msg, false, true);
 -
 -      let htlc_fail_updates = get_htlc_update_msgs!(nodes[1], nodes[0].node.get_our_node_id());
 -      assert!(htlc_fail_updates.update_add_htlcs.is_empty());
 -      assert_eq!(htlc_fail_updates.update_fail_htlcs.len(), 1);
 -      assert!(htlc_fail_updates.update_fail_malformed_htlcs.is_empty());
 -      assert!(htlc_fail_updates.update_fee.is_none());
 -
 -      nodes[0].node.handle_update_fail_htlc(&nodes[1].node.get_our_node_id(), &htlc_fail_updates.update_fail_htlcs[0]);
 -      commitment_signed_dance!(nodes[0], nodes[1], htlc_fail_updates.commitment_signed, true, true);
 -      expect_payment_failed_with_update!(nodes[0], our_payment_hash, false, nodes[2].node.list_channels()[0].short_channel_id.unwrap(), true);
 -
 -      // Now disconnect nodes[1] from its peers and restart with accept_forwards_to_priv_channels set
 -      // to true. Sadly there is currently no way to change it at runtime.
 -
 -      nodes[0].node.peer_disconnected(&nodes[1].node.get_our_node_id(), false);
 -      nodes[2].node.peer_disconnected(&nodes[1].node.get_our_node_id(), false);
 -
 -      let nodes_1_serialized = nodes[1].node.encode();
 -      let mut monitor_a_serialized = test_utils::TestVecWriter(Vec::new());
 -      let mut monitor_b_serialized = test_utils::TestVecWriter(Vec::new());
 -      get_monitor!(nodes[1], chan_id_1).write(&mut monitor_a_serialized).unwrap();
 -      get_monitor!(nodes[1], cs_funding_signed.channel_id).write(&mut monitor_b_serialized).unwrap();
 -
 -      persister = test_utils::TestPersister::new();
 -      let keys_manager = &chanmon_cfgs[1].keys_manager;
 -      new_chain_monitor = test_utils::TestChainMonitor::new(Some(nodes[1].chain_source), nodes[1].tx_broadcaster.clone(), nodes[1].logger, node_cfgs[1].fee_estimator, &persister, keys_manager);
 -      nodes[1].chain_monitor = &new_chain_monitor;
 -
 -      let mut monitor_a_read = &monitor_a_serialized.0[..];
 -      let mut monitor_b_read = &monitor_b_serialized.0[..];
 -      let (_, mut monitor_a) = <(BlockHash, ChannelMonitor<EnforcingSigner>)>::read(&mut monitor_a_read, keys_manager).unwrap();
 -      let (_, mut monitor_b) = <(BlockHash, ChannelMonitor<EnforcingSigner>)>::read(&mut monitor_b_read, keys_manager).unwrap();
 -      assert!(monitor_a_read.is_empty());
 -      assert!(monitor_b_read.is_empty());
 -
 -      no_announce_cfg.accept_forwards_to_priv_channels = true;
 -
 -      let mut nodes_1_read = &nodes_1_serialized[..];
 -      let (_, nodes_1_deserialized_tmp) = {
 -              let mut channel_monitors = HashMap::new();
 -              channel_monitors.insert(monitor_a.get_funding_txo().0, &mut monitor_a);
 -              channel_monitors.insert(monitor_b.get_funding_txo().0, &mut monitor_b);
 -              <(BlockHash, ChannelManager<EnforcingSigner, &test_utils::TestChainMonitor, &test_utils::TestBroadcaster, &test_utils::TestKeysInterface, &test_utils::TestFeeEstimator, &test_utils::TestLogger>)>::read(&mut nodes_1_read, ChannelManagerReadArgs {
 -                      default_config: no_announce_cfg,
 -                      keys_manager,
 -                      fee_estimator: node_cfgs[1].fee_estimator,
 -                      chain_monitor: nodes[1].chain_monitor,
 -                      tx_broadcaster: nodes[1].tx_broadcaster.clone(),
 -                      logger: nodes[1].logger,
 -                      channel_monitors,
 -              }).unwrap()
 -      };
 -      assert!(nodes_1_read.is_empty());
 -      nodes_1_deserialized = nodes_1_deserialized_tmp;
 -
 -      assert!(nodes[1].chain_monitor.watch_channel(monitor_a.get_funding_txo().0, monitor_a).is_ok());
 -      assert!(nodes[1].chain_monitor.watch_channel(monitor_b.get_funding_txo().0, monitor_b).is_ok());
 -      check_added_monitors!(nodes[1], 2);
 -      nodes[1].node = &nodes_1_deserialized;
 -
 -      nodes[0].node.peer_connected(&nodes[1].node.get_our_node_id(), &msgs::Init { features: InitFeatures::known() });
 -      nodes[1].node.peer_connected(&nodes[0].node.get_our_node_id(), &msgs::Init { features: InitFeatures::empty() });
 -      let as_reestablish = get_event_msg!(nodes[0], MessageSendEvent::SendChannelReestablish, nodes[1].node.get_our_node_id());
 -      let bs_reestablish = get_event_msg!(nodes[1], MessageSendEvent::SendChannelReestablish, nodes[0].node.get_our_node_id());
 -      nodes[1].node.handle_channel_reestablish(&nodes[0].node.get_our_node_id(), &as_reestablish);
 -      nodes[0].node.handle_channel_reestablish(&nodes[1].node.get_our_node_id(), &bs_reestablish);
 -      get_event_msg!(nodes[0], MessageSendEvent::SendChannelUpdate, nodes[1].node.get_our_node_id());
 -      get_event_msg!(nodes[1], MessageSendEvent::SendChannelUpdate, nodes[0].node.get_our_node_id());
 -
 -      nodes[1].node.peer_connected(&nodes[2].node.get_our_node_id(), &msgs::Init { features: InitFeatures::known() });
 -      nodes[2].node.peer_connected(&nodes[1].node.get_our_node_id(), &msgs::Init { features: InitFeatures::empty() });
 -      let bs_reestablish = get_event_msg!(nodes[1], MessageSendEvent::SendChannelReestablish, nodes[2].node.get_our_node_id());
 -      let cs_reestablish = get_event_msg!(nodes[2], MessageSendEvent::SendChannelReestablish, nodes[1].node.get_our_node_id());
 -      nodes[2].node.handle_channel_reestablish(&nodes[1].node.get_our_node_id(), &bs_reestablish);
 -      nodes[1].node.handle_channel_reestablish(&nodes[2].node.get_our_node_id(), &cs_reestablish);
 -      get_event_msg!(nodes[1], MessageSendEvent::SendChannelUpdate, nodes[2].node.get_our_node_id());
 -      get_event_msg!(nodes[2], MessageSendEvent::SendChannelUpdate, nodes[1].node.get_our_node_id());
 -
 -      nodes[0].node.send_payment(&route, our_payment_hash, &Some(our_payment_secret)).unwrap();
 -      check_added_monitors!(nodes[0], 1);
 -      pass_along_route(&nodes[0], &[&[&nodes[1], &nodes[2]]], 10_000, our_payment_hash, our_payment_secret);
 -      claim_payment(&nodes[0], &[&nodes[1], &nodes[2]], our_payment_preimage);
 -}
 -
  #[test]
  fn test_bump_penalty_txn_on_revoked_commitment() {
        // In case of penalty txn with too low feerates for getting into mempools, RBF-bump them to be sure
index 62cbda9a76ddd097710d897537e11f104c1ec408,48960cdecae91947f1f71838157f1ef012998127..1b52af8815624e3c4e3e3d9a400577875cfa8869
@@@ -670,6 -670,9 +670,9 @@@ where L::Target: Logger 
                        }
                }
        }
+       if payment_params.max_total_cltv_expiry_delta <= final_cltv_expiry_delta {
+               return Err(LightningError{err: "Can't find a route where the maximum total CLTV expiry delta is below the final CLTV expiry.".to_owned(), action: ErrorAction::IgnoreError});
+       }
  
        // The general routing idea is the following:
        // 1. Fill first/last hops communicated by the caller.
                                        // In order to already account for some of the privacy enhancing random CLTV
                                        // expiry delta offset we add on top later, we subtract a rough estimate
                                        // (2*MEDIAN_HOP_CLTV_EXPIRY_DELTA) here.
-                                       let max_total_cltv_expiry_delta = payment_params.max_total_cltv_expiry_delta
+                                       let max_total_cltv_expiry_delta = (payment_params.max_total_cltv_expiry_delta - final_cltv_expiry_delta)
                                                .checked_sub(2*MEDIAN_HOP_CLTV_EXPIRY_DELTA)
-                                               .unwrap_or(payment_params.max_total_cltv_expiry_delta);
+                                               .unwrap_or(payment_params.max_total_cltv_expiry_delta - final_cltv_expiry_delta);
                                        let hop_total_cltv_delta = ($next_hops_cltv_delta as u32)
                                                .checked_add($candidate.cltv_expiry_delta())
                                                .unwrap_or(u32::max_value());
@@@ -1668,7 -1671,6 +1671,7 @@@ mod tests 
                        },
                        funding_txo: Some(OutPoint { txid: bitcoin::Txid::from_slice(&[0; 32]).unwrap(), index: 0 }),
                        short_channel_id,
 +                      inbound_scid_alias: None,
                        channel_value_satoshis: 0,
                        user_channel_id: 0,
                        balance_msat: 0,
                let random_seed_bytes = keys_manager.get_secure_random_bytes();
  
                // Disable nodes 1, 2, and 8 by requiring unknown feature bits
 -              let unknown_features = NodeFeatures::known().set_unknown_feature_required();
 +              let mut unknown_features = NodeFeatures::known();
 +              unknown_features.set_unknown_feature_required();
                add_or_update_node(&net_graph_msg_handler, &secp_ctx, &privkeys[0], unknown_features.clone(), 1);
                add_or_update_node(&net_graph_msg_handler, &secp_ctx, &privkeys[1], unknown_features.clone(), 1);
                add_or_update_node(&net_graph_msg_handler, &secp_ctx, &privkeys[7], unknown_features.clone(), 1);
                        .with_max_total_cltv_expiry_delta(feasible_max_total_cltv_delta);
                let keys_manager = test_utils::TestKeysInterface::new(&[0u8; 32], Network::Testnet);
                let random_seed_bytes = keys_manager.get_secure_random_bytes();
-               let route = get_route(&our_id, &feasible_payment_params, &network_graph, None, 100, 42, Arc::clone(&logger), &scorer, &random_seed_bytes).unwrap();
+               let route = get_route(&our_id, &feasible_payment_params, &network_graph, None, 100, 0, Arc::clone(&logger), &scorer, &random_seed_bytes).unwrap();
                let path = route.paths[0].iter().map(|hop| hop.short_channel_id).collect::<Vec<_>>();
                assert_ne!(path.len(), 0);
  
                let fail_max_total_cltv_delta = 23;
                let fail_payment_params = PaymentParameters::from_node_id(nodes[6]).with_route_hints(last_hops(&nodes))
                        .with_max_total_cltv_expiry_delta(fail_max_total_cltv_delta);
-               match get_route(&our_id, &fail_payment_params, &network_graph, None, 100, 42, Arc::clone(&logger), &scorer, &random_seed_bytes)
+               match get_route(&our_id, &fail_payment_params, &network_graph, None, 100, 0, Arc::clone(&logger), &scorer, &random_seed_bytes)
                {
                        Err(LightningError { err, .. } ) => {
                                assert_eq!(err, "Failed to find a path to the given destination");
@@@ -5364,7 -5365,6 +5367,7 @@@ mod benches 
                                txid: bitcoin::Txid::from_slice(&[0; 32]).unwrap(), index: 0
                        }),
                        short_channel_id: Some(1),
 +                      inbound_scid_alias: None,
                        channel_value_satoshis: 10_000_000,
                        user_channel_id: 0,
                        balance_msat: 10_000_000,
                let mut routes = Vec::new();
                let mut route_endpoints = Vec::new();
                let mut seed: usize = 0xdeadbeef;
-               'load_endpoints: for _ in 0..100 {
+               'load_endpoints: for _ in 0..150 {
                        loop {
                                seed *= 0xdeadbeef;
                                let src = PublicKey::from_slice(nodes.keys().skip(seed % nodes.len()).next().unwrap().as_slice()).unwrap();
                        }
                }
  
+               // Because we've changed channel scores, its possible we'll take different routes to the
+               // selected destinations, possibly causing us to fail because, eg, the newly-selected path
+               // requires a too-high CLTV delta.
+               route_endpoints.retain(|(first_hop, params, amt)| {
+                       get_route(&payer, params, &graph.read_only(), Some(&[first_hop]), *amt, 42, &DummyLogger{}, &scorer, &random_seed_bytes).is_ok()
+               });
+               route_endpoints.truncate(100);
+               assert_eq!(route_endpoints.len(), 100);
                // ...then benchmark finding paths between the nodes we learned.
                let mut idx = 0;
                bench.iter(|| {