From 7eea02e846a8f671cd2568b8ed4fafd2cb0e7e8b Mon Sep 17 00:00:00 2001
From: Rusty Russell <rusty@rustcorp.com.au>
Date: Sun, 11 Feb 2018 21:32:51 +1030
Subject: [PATCH] db: don't allow newer db versions.

Clearly we could do more damage if we continue.

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
---
 wallet/db.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/wallet/db.c b/wallet/db.c
index d368b9881..c651080b6 100644
--- a/wallet/db.c
+++ b/wallet/db.c
@@ -390,6 +390,9 @@ static void db_migrate(struct db *db, struct log *log)
 
 	if (current == -1)
 		log_info(log, "Creating database");
+	else if (available < current)
+		fatal("Refusing to migrate down from version %u to %u",
+		      current, available);
 	else if (current != available)
 		log_info(log, "Updating database from version %u to %u",
 			 current, available);