mirrors/arti.git/crates/tor-bytes/src, branch arti-v1.1.6

lints: Run maint/add_warning to actually apply new lints

2023-06-21T11:15:41Z

tor-bytes: Remove use of arrayref

2023-05-25T18:48:57Z

Part of #872: Now that const generics are in, we have better ways to express converting slices into array-references.

Serval rustdoc link fixes.

2023-03-08T19:21:33Z

tor-bytes: defend against misuse of extract_n().

2023-03-06T17:33:10Z

Previously, if somebody wrote this code, an attacker could easily use it to cause an OOM panic: ``` let n = r.take_u64(); let items: Vec = r.extract_n(n as usize)?; ``` The first line of defense here is not to write protocols like that: we don't actually _have_ any 32-bit counters in our protocol AFAICT. The second line of defense is to pre-check `n` for reasonableness before calling `extract_n`. Here we add a third line of defense: whereas previously we would do `Vec::with_capacity(n)` in `extract_n`, we now allocate an initial capacity of `min(n, r.remaining())`. This ensures that the size of the allocation can't exceed the remaining length of the message, which (for our cell types at least) should prevent it from overflowing or running OOM.

tor-bytes: Clarify that Cursor is not a good thing, and could be neater.

2023-03-01T16:21:52Z

clarify results of misusing cursors

2023-03-01T15:57:14Z

tor-bytes: impl Readable and Writeable for CtByteArray.

2023-02-28T16:23:44Z

tor-bytes: Add cursor functionality to Reader

2023-02-28T16:23:44Z

We'll use this to implement signature and MAC checking for EstablishIntro cells.

Change tor_bytes::Error::BadMessage to a Cow.

2023-02-09T15:20:31Z

Actually, to avoid making a breaking change, I'm deprecating BadMessage and creating a new InvalidMessage variant that takes a Cow. This way I don't need to track every crate that re-exposes tor_bytes::Error and call this a breaking change in those. Making this change will allow tor_bytes errors to be much more helpful.

Allow clippy::unchecked_duration_subtraction in tests

2023-01-27T13:28:02Z

This panics on error, and we're fine with a panic on misbehavior in tests.