mirrors/arti.git/crates/tor-bytes, branch tor-llcrypto-v0.4.4

Bump patchlevel on crates with non-breaking changes

2023-03-31T12:24:39Z

For these crates, the changes are nontrivial, so we _do_ bump the versions on which their dependent crates depend. Fortunately, since they are all pre-1.0, we don't need to distinguish semver-additions from other changes. (Except for arti, which _is_ post-1.0, but gets a patchlevel bump anyway.) These are unstable crates with breaking changes: ``` tor-hscrypto tor-hsclient ``` These have new or extended APIs: ``` safelog tor-bytes tor-cell tor-linkspec tor-llcrypto tor-proto tor-cert arti-client ``` These have new unstable APIs or features: ``` tor-netdoc tor-circmgr (also broke some unstable APIs) arti (is post-1.0) ``` These have bugfixes only: ``` caret tor-dirmgr ```

Serval rustdoc link fixes.

2023-03-08T19:21:33Z

tor-bytes: Add take_rest and read_nested_* to fuzzer.

2023-03-06T17:39:57Z

tor-bytes: defend against misuse of extract_n().

2023-03-06T17:33:10Z

Previously, if somebody wrote this code, an attacker could easily use it to cause an OOM panic: ``` let n = r.take_u64(); let items: Vec = r.extract_n(n as usize)?; ``` The first line of defense here is not to write protocols like that: we don't actually _have_ any 32-bit counters in our protocol AFAICT. The second line of defense is to pre-check `n` for reasonableness before calling `extract_n`. Here we add a third line of defense: whereas previously we would do `Vec::with_capacity(n)` in `extract_n`, we now allocate an initial capacity of `min(n, r.remaining())`. This ensures that the size of the allocation can't exceed the remaining length of the message, which (for our cell types at least) should prevent it from overflowing or running OOM.

tor-bytes: Clarify that Cursor is not a good thing, and could be neater.

2023-03-01T16:21:52Z

clarify results of misusing cursors

2023-03-01T15:57:14Z

tor-bytes: impl Readable and Writeable for CtByteArray.

2023-02-28T16:23:44Z

tor-bytes: Add cursor functionality to Reader

2023-02-28T16:23:44Z

We'll use this to implement signature and MAC checking for EstablishIntro cells.

Remove semver.md files now that 1.1.2 is out.

2023-02-28T15:06:41Z

Patchlevel bumps for remaining changed crates.

2023-02-28T12:13:27Z

These crates have had small code changes, but no API additions: tor-config tor-socksproto tor-cert tor-chanmgr tor-ptmgr tor-guardmgr tor-circmgr tor-dirclient tor-dirmgr arti tor-hsservice tor-congestion These crates have had API extensions: fs-mistrust tor-llcrypto tor-bytes tor-checkable tor-linkspec tor-netdoc tor-persist arti-client