mirrors/arti.git/crates/tor-circmgr/src, branch arti-v2.5.0mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v2.5.02026-06-24T09:01:03Ztor-netdoc: Wrap port policies in Intern2026-06-24T09:01:03ZClara Englercve@cve.cx2026-06-18T14:46:36Zurn:sha1:7ad86bce0d99a28519684d1cdb88ff6ec3adcf62
This commit wraps the port policies in an Intern.
proto: Add crate-level exports for two extra stream types (fmt)2026-06-17T13:38:44ZGabriela Moldovangabi@torproject.org2026-06-17T13:31:26Zurn:sha1:d305c6c0a201703ce14fbcfdce1864aeda9cc8dcmaint: Run maint/add_warning to deny string slices2026-06-09T15:36:01ZClara Englercve@cve.cx2026-06-09T15:36:01Zurn:sha1:9f5752a77fb57052c06ead0eeae606831f1e8e97
This commit executes maint/add_warning with the just added change to
deny string slices except in tests.
I recommend auditing this by checking out the previous commit followed
by running the script yourself and then verifying that the diff is
identical to this commit.
This commit makes cargo clippy fail. We will add exceptions in the next
commit.
Upgrade rand crates to 0.10.2026-05-12T20:55:43ZWesley Aptekar-Casselsme@wesleyac.com2026-05-07T20:06:21Zurn:sha1:a18167928901d8c88cd1cdd87346de8ad1ee42a2
When the circ-padding feature is enabled, we use maybenot, which does
not yet support rand 0.10. In the meantime, enabling this feature pulls
in rand 0.9. This is not ideal, but should be okay as a temporary
situation.
This also replaces the use of ReseedingRng (which was removed in 0.10)
with the reseeding_rng crate. This is somewhat less performant, but it
should be okay.
circmgr,hsclient: s/requery_period/requery_interval2026-05-07T18:12:01ZGabriela Moldovangabi@torproject.org2026-04-30T15:22:42Zurn:sha1:6e8bcbbe62a2fb0b57a2e3321496fd7cfeaa20be
C Tor calls this a "period", but "interval" is more accurate.
circmgr: Add config option for the HsDir requery period2026-05-07T18:11:55ZGabriela Moldovangabi@torproject.org2026-04-30T09:18:22Zurn:sha1:01d51cf4777b3d74dc640ac0e444f63758b3f057circmgr: Document caveats about BuildCircuit estimator2026-05-07T14:17:39ZNick Mathewsonnickm@torproject.org2026-04-30T14:22:59Zurn:sha1:ce1b8826fcda4c3ed2e4c5c77e8e184dc4bc80da
There's no reason that the next person should have to rediscover
these caveats.
circmgr: Modernize and correct saturating_mul_f642026-05-07T14:17:23ZNick Mathewsonnickm@torproject.org2026-04-30T13:52:53Zurn:sha1:35f7dfe5e76f6620118576ec42a13920fe144ac5
Duration::try_from_secs_f64 has existed since Rust 1.66,
so we can use it now.
It seems wrong to treat "infinity" and "negative infinity" as "one
second", so make them actually saturating.
Additionally, document behavior for infinity and negative infinity,
and document that the NaN behavior isn't documented.
(And secretly NaN behavior return a number on the same order of
magnitude as the input.)
circmgr: Avoid half-steps in our timeout_scale calculation2026-05-07T12:33:03ZNick Mathewsonnickm@torproject.org2026-04-30T13:37:02Zurn:sha1:1a11a4ff43cece6edaaa2394d5e4a3c7b0db078d
This strategy is safe because (outside of our tests) we never look
at the actual values of timeout_scale, but only at their ratios.
circmgr, hsclient: Introduce and use a OneWay timeout estimator.2026-05-07T12:33:03ZNick Mathewsonnickm@torproject.org2026-04-30T13:28:45Zurn:sha1:9d3c0bb0eff93e902853694d929d5aade8cdd49f