mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v2.4.0 2026-03-24T18:49:16Z 2026-03-24T18:49:16Z David Goulet dgoulet@torproject.org 2026-03-24T18:49:16Z urn:sha1:2346ec5dc6de3aba42a4cfd008fda0b6e878c2bf Force use of standard hasher with weak_tables. Closes #2418 See merge request tpo/core/arti!3801 2026-03-24T16:04:08Z Tobias Stoeckmann tobias@stoeckmann.org 2026-03-24T16:04:08Z urn:sha1:1fb2b8dd4aee7c943ce90d6631be473f2a296fe6 Typos found with codespell 2026-03-24T14:22:29Z Nick Mathewson nickm@torproject.org 2026-03-24T14:22:29Z urn:sha1:0a4cd08f3bd0a0cf78cffc31e05251628b86f243 Closes #2418. Fixes TROVE-2026-005, where we would use a less cryptographically secure (and probably less DoS resistant) hash function for these tables if: - We are built alongside another crate that uses `weak-table` - That crate enables the `weak-table/ahash` feature. - We are running on a system without hardware AES. Severity: Low 2026-01-19T10:01:59Z Clara Engler cve@cve.cx 2026-01-15T14:53:39Z urn:sha1:0ba6540a84dc6ee15b79cdb49137fa659f4a4de8 Because we went with `docid` in the database (due to `rowid`), it is only natural to call the code variables `docid` too. 2026-01-19T10:01:59Z Clara Engler cve@cve.cx 2026-01-15T14:50:28Z urn:sha1:30d43c6384c57c7f90dbac7f40d496143cec6102 This commit renames the sha256 column to docid for the reason that we agreed upon making the schema visible to all modules, so if we were to encapsulate docid properly, this change is only natural. 2026-01-19T10:01:59Z Clara Engler cve@cve.cx 2026-01-15T14:33:19Z urn:sha1:2e0bf76a2878e7f9979dcac4bebe5b986596d6aa This commit introduces a new type in the database module named `DocumentId` for abstracting the underlying content-addressable hash algorithm we are using. 2025-11-06T11:28:22Z Ian Jackson ijackson@chiark.greenend.org.uk 2025-11-06T11:23:25Z urn:sha1:a5fd5c48ea059a80cc1f6c50e248654b5ff3aaff Run maint/add_warning 2025-11-03T12:59:27Z Clara Engler cve@cve.cx 2025-11-03T12:59:27Z urn:sha1:325a6a476f931ea8aa62b177af5268824141e948 2025-11-03T12:41:07Z Clara Engler cve@cve.cx 2025-10-22T13:49:11Z urn:sha1:011a8d597aa04ad3277599ae541e962995b2b154 This commit applies the recent changes to the database module into the http and http::cache module. Notably, this includes the use of the database::sql! macro as well as the use of database::read_tx and database::rw_tx for creation transaction and saving, as well as retrying, although the latter one is subject to SQLite's own busy handler 2025-10-30T15:53:27Z Clara Engler cve@cve.cx 2025-10-20T14:33:31Z urn:sha1:b7dd6d4b7e230975347ec99c1db554498e2ace7e This commit makes the entire database operations synchronous, thereby replacing deadpool with r2d2. The full motivation is outlined in a rustdoc comment at the top of the `database` module, but it can be summarized to the fact that SQLite is by design inherently synchronous due to directly interfacing with the file system.