Renaming two rooms in quick succession silently loses the first rename #17
Closed
opened 2026-09-12 01:50:52 -04:00 by jared
·
0 comments
No Branch/Tag Specified
lotus
update-packages
sw-fix
read-me-update
image-path-changes
dm-calls
fix-2469
renovate/element-hq-element-call-embedded-0.x
renovate/npm-i18next-http-backend-vulnerability
renovate/npm-vite-vulnerability
dev
docs-update
more-theme
fix-257
imporve-thread-reply
revert-2402-improve-menu-congestion
mxidColor-toggle
update-sw-main-msg
v4.11.1
v4.10.5
v4.10.4
v4.10.3
v4.10.2
v4.10.1
v4.10.0
v4.9.1
v4.9.0
v4.8.1
v4.8.0
v4.7.1
v4.7.0
v4.6.0
v4.5.1
v4.5.0
v4.4.0
v4.3.2
v4.3.0
v4.2.3
v4.2.2
v4.2.1
v4.2.0
v4.1.0
v4.0.3
v4.0.0
v3.2.0
v3.1.0
v3.0.0
v2.2.6
v2.2.5
v2.2.4
v2.2.3
v2.2.2
v2.2.1
v2.2.0
v2.1.3
v2.1.2
v2.1.1
v2.1.0
v2.0.4
v2.0.3
v2.0.2
v2.0.1
v2.0.0
v1.8.2
v1.8.1
v1.8.0
v1.7.0
v1.6.1
v1.6.0
v1.5.1
v1.5.0
v1.4.0
v1.3.2
v1.3.1
v1.3.0
v1.2.1
v1.2.0
v1.1.0
v1.0.0
Labels
Clear labels
a11y
area: appearance
area: auth-session
area: build-ci
area: calls
area: desktop
area: media
area: messaging
area: mobile
area: moderation
area: navigation
area: notifications
area: settings
area: threads
bug
dependencies
docs
duplicate
enhancement
help wanted
invalid
needs-human-review
performance
planning
priority: critical
priority: high
priority: low
priority: medium
qa
question
research
security
tech-debt
ux
wontfix
Accessibility: keyboard, screen reader, contrast, motion
Client area: appearance
Client area: auth-session
Client area: build-ci
Client area: calls
Client area: desktop
Client area: media
Client area: messaging
Client area: mobile
Client area: moderation
Client area: navigation
Client area: notifications
Client area: settings
Client area: threads
Something is not working
Third-party package versions and advisories
README / LOTUS_* docs wrong or missing
This issue or pull request already exists
New feature
Need some help
Something is wrong
Re-render storms, leaks, heavy work on hot paths
Data loss, security hole, or crash on a main path
Broken feature or serious usability problem
Minor issue or polish
Wrong behaviour in an edge case or notable degradation
Manual QA: shipped, needs a human in a real environment
More information is needed
XSS, unsafe URLs, data leaks, auth/session
Code health, dead code, fragile patterns
Usability or visual inconsistency
This won't be fixed
Milestone
No items
No Milestone
Audit 2026-09 · High
Projects
Clear projects
No projects
Notifications
Due Date
Dependencies
No dependencies set.
Reference: LotusGuild/cinny#17
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Severity: high · Type: bug · Confidence: high
Location:
src/app/features/room-nav/RoomNavItem.tsx:132-157(handleSave/handleClear),src/app/hooks/useRoomMeta.ts:39-57(getLocalRoomNamesContent), confirmed againstnode_modules/matrix-js-sdk/lib/client.js:1313-1368Problem
The per-room custom-name feature does a plain read-modify-write of the whole
io.lotus.room_namesaccount-data blob:getLocalRoomNamesContent(mx)(a synchronous read ofmx.store.getAccountData) → merge in the one room's new/cleared name →setAccountData(...). Reading the actual SDK source confirmssetAccountDataRawonly PUTs to the server and does not touch the local store;mx.store's copy is updated only when the change is echoed back over/sync, andclient.setAccountData()itselfawaits that echo before resolving. SogetAccountData/getLocalRoomNamesContentstays stale for the whole round-trip. If the user renames room A, then renames room B before A's echo lands (a few hundred ms to a couple seconds — easily done via the sidebar's inline rename dialog), B's write is computed from a snapshot that doesn't yet contain A's new name and overwrites the entireroomsmap server-side, permanently discarding A's rename with no error shown. The codebase already has a purpose-built fix for exactly this class of bug —createAccountDataListStore(used byuseUserNotes/bookmarks), which serializes writes through one shared in-memory snapshot — but the room-name feature doesn't use it.How to trigger
Rename two different rooms' local names back-to-back using the pencil/rename option in the sidebar, a few hundred ms to ~1-2s apart.
Suggested fix
Route local room-name reads/writes through
createAccountDataListStore(or an equivalent serialized write queue) the same wayuseUserNotesdoes, instead of an ad-hoc read-modify-write against the SDK's local cache.Filed from the September 2026 client audit (branch
lotus@4bea4895).