summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | CircMgr: Add an accessor for the CircuitBuilder.Nick Mathewson2022-09-221-0/+8
| |/ / | | | | | | | | | | | | | | | | | | Without this, actually building circuits manually is a pain. This API is behind the `experimental-api` feature, and so it does not require a semver.md entry.
* | | Merge branch 'ct_key_zero' into 'main'Alexander Færøy2022-09-214-2/+36
|\ \ \ | |/ / |/| | | | | | | | Add a new constant-time is_zero() check for RsaIdentity See merge request tpo/core/arti!735
| * | Intoduce1: Use a constant-time check for all-zero RsaIdentityNick Mathewson2022-09-201-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As a matter of good crypto practice, we shouldn't use short-circuiting checks to compare keys or key-like objects, since the amount of time taken by those checks can leak information about their inputs. I don't think it's actually _necessary_ to use a constant-time operation in this case, but let's establish the precedent. This is a follow-up to !724.
| * | Add a new constant-time is_zero() check for RsaIdentityNick Mathewson2022-09-203-0/+33
|/ / | | | | | | | | | | | | | | | | | | | | | | | | There are some places in the protocol where we have an all-zero RSA identity that does not truly represent a key, but rather represents an absent or unknown key. For these, it's better to use `RsaIdentity::is_zero` instead of manually checking for a set of zero bytes: it expresses the intent better, and ensures that the operation is constant-time. I am deliberately not introducing a more general IsZero trait here, or implementing is_zero for anything else: This is the only one we seem to need right now. We can generalize it later if we have to.
* | Merge branch 'cell-introduce1' into 'main'Nick Mathewson2022-09-203-6/+130
|\ \ | | | | | | | | | | | | Implement onion service Introduce1 See merge request tpo/core/arti!724
| * | Implement onion service Introduce1Yuan Lyu2022-09-083-6/+130
| | |
* | | Merge branch 'setuid-all-platforms' into 'main'eta2022-09-143-19/+21
|\ \ \ | |_|/ |/| | | | | | | | | | | | | | enumerate platform with getresuid support Closes #582 See merge request tpo/core/arti!728
| * | enumerate platform with getresuid supporttrinity-1686a2022-09-103-19/+21
|/ /
* | Merge branch 'no-inline-internalerror-test' into 'main'Nick Mathewson2022-09-091-0/+1
|\ \ | | | | | | | | | | | | | | | | | | force no inlining on internal_macro_test Closes #570 See merge request tpo/core/arti!727
| * | force no inlining on internal_macro_testtrinity-1686a2022-09-091-0/+1
|/ / | | | | | | it may fix this test when running in release, where the function gets inlined, so its name does not appear in the backtrace
* | Merge branch 'debug_570' into 'main'Ian Jackson2022-09-081-0/+9
|\ \ | | | | | | | | | | | | Add a dbg!() to diagnose #570. See merge request tpo/core/arti!726
| * | Add a dbg!() to diagnose #570.Nick Mathewson2022-09-081-0/+9
|/ / | | | | | | | | This won't fix anything, but it will let us see what the backtrace looks like when it fails.
* | Merge branch 'fix-async-std' into 'main'eta2022-09-073-2/+6
|\ \ | | | | | | | | | | | | fix compilation error with async-std See merge request tpo/core/arti!723
| * | fix compilation error with async-stdtrinity-1686a2022-09-063-2/+6
| | |
* | | Merge branch 'schedule_drop' into 'main'Ian Jackson2022-09-077-9/+45
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | `TaskSchedule`: give error on `sleep*()` if last handle is dropped Closes #572 See merge request tpo/core/arti!725
| * | | `TaskSchedule`: give error on `sleep*()` if last handle is droppedNick Mathewson2022-09-077-9/+45
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes an busy-loop. When the last `TaskHandle` on a `TaskSchedule` is dropped, the schedule is permanently canceled: whatever operation it was scheduling should no longer be performed. But our code was broken: the `sleep()` and `sleep_until_wallclock()` functions don't verify whether the handles are dropped or not. This breakage caused an CPU-eating busy-loop in `sleep_until_wallclock`. With this patch, we now return a `Result<(), SleepError>` from these functions. Fixes #572.
* | | Add a reminder to remove semver.md after release.Nick Mathewson2022-09-071-0/+2
| | |
* | | Remove semver.md from arti-1.0.0Nick Mathewson2022-09-0716-55/+0
| |/ |/|
* | Merge branch 'ci-repro' into 'main'Ian Jackson2022-09-063-5/+15
|\ \ | |/ |/| | | | | CI: build-repro: Bump image to 1.63, and other improvements See merge request tpo/core/arti!716
| * maint/docker_reproducible_build: Bump image here tooIan Jackson2022-09-061-1/+1
| |
| * maint/reproducible_build: Pass --locked to cargo buildIan Jackson2022-09-061-1/+1
| | | | | | | | We don't want any updates!
| * maint/reproducible_build: Honour $CARGOIan Jackson2022-09-061-1/+4
| | | | | | | | This makes it easier to test, and perform other kinds of stunts.
| * maint/reproducible_build: Centralise -p arti --features etc.Ian Jackson2022-09-061-3/+6
| |
| * maint/reproducible_build: Bring "cargo build" invocations togetherIan Jackson2022-09-061-3/+7
| |
| * CI: build-repro: Bump image to 1.63Ian Jackson2022-09-061-1/+1
|/ | | | | | | | | tinystr 0.6.2 (which our Cargo.toml's permit and our Cargo.lock specifies) has an MSRV of 1.60. The symptom with earlier Rust is this from cargo: error: failed to select a version for the requirement `tinystr = "^0.6.0"` (which is, on the face of it, nonsense).
* Merge branch 'tbb-no-red-page' into 'main'eta2022-09-052-18/+14
|\ | | | | | | | | document TOR_SKIP_CONTROLPORTTEST=1 for no warning on Tor Browser See merge request tpo/core/arti!719
| * document TOR_SKIP_CONTROLPORTTEST=1 for no warning on Tor Browsertrinity-1686a2022-09-032-18/+14
|/
* Merge branch 'readme' into 'main'Nick Mathewson2022-09-027-124/+221
|\ | | | | | | | | READMEs: Remove many caveats and general tidying See merge request tpo/core/arti!717
| * READMEs: Drop stability warning re configIan Jackson2022-09-021-9/+0
| | | | | | | | | | The referenced ticket is closed and I think the top-level caveats remaining after !717 are sufficient.
| * READMEs: Run maint/readmes (to update READMEs from lib.rs)Ian Jackson2022-09-022-3/+57
| |
| * docs: Move Tor Browser part to arti top-level (rustfmt etc.)Ian Jackson2022-09-021-16/+16
| |
| * arti-client README: Say we intend to provide FFIIan Jackson2022-09-021-1/+2
| |
| * README: Remove caveats from Tor Browser instructionsIan Jackson2022-09-021-3/+1
| |
| * README: Fix links to Tor BrowserIan Jackson2022-09-021-3/+4
| |
| * docs: Move Tor Browser part to arti top-level (syntax fixup)Ian Jackson2022-09-021-6/+16
| |
| * docs: Move Tor Browser part to arti top-level (code motion)Ian Jackson2022-09-022-46/+46
| |
| * README: change an NB to NoteIan Jackson2022-09-021-1/+1
| | | | | | | | https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/717#note_2834307
| * READMEs: arti-client: Remove caveats and add some xrefsIan Jackson2022-09-022-14/+30
| |
| * READMEs: toplevel: Remove caveats, add xrefs, and tidyingIan Jackson2022-09-021-31/+33
| |
| * READMEs: arti (CLI): Remove several caveats, and tidyingIan Jackson2022-09-022-24/+48
|/
* Merge branch 'update-notify' into 'main'Ian Jackson2022-09-015-223/+101
|\ | | | | | | | | | | | | update to notify v5.0.0 Closes #454 See merge request tpo/core/arti!679
| * update to v5.0.0trinity-1686a2022-08-315-223/+101
| |
* | Changelog: add acknowledgmentsarti-v1.0.0Nick Mathewson2022-09-011-0/+8
| |
* | Merge branch 'changelog' into 'main'Nick Mathewson2022-09-011-4/+5
|\ \ | | | | | | | | | | | | Changelog fixes See merge request tpo/core/arti!715
| * | changelog: Sadly, the shellexpand non-UTF-8 support is not merged yetIan Jackson2022-09-011-2/+2
| | |
| * | changelog: Fix grammar/typo re fs-mistrustIan Jackson2022-09-011-2/+3
|/ /
* | Add links to changelog.Nick Mathewson2022-09-011-3/+74
| |
* | Bump crate versions in preparation for Arti 1.0.0 release.Nick Mathewson2022-09-0129-175/+175
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Because we want to work more on ensuring that our semver stability story is solid, we are _not_ bumping arti-client to 1.0.0 right now. Here are the bumps we _are_ doing. Crates with "minor" bumps have had API breaks; crates with "patch" bumps have had new APIs added. Note that `tor-congestion` is not bumped here: it's a new crate, and hasn't been published before. ``` tor-basic-utils minor fs-mistrust minor tor-config minor tor-rtcompat minor tor-rtmock minor tor-llcrypto patch tor-bytes patch tor-linkspec minor tor-cell minor tor-proto minor tor-netdoc patch tor-netdir minor tor-persist patch tor-chanmgr minor tor-guardmgr minor tor-circmgr minor tor-dirmgr minor arti-client minor arti-hyper minor arti major arti-bench minor arti-testing minor ```
* | Update patch-versions on crates without API changes.Nick Mathewson2022-09-0114-26/+26
| | | | | | | | | | | | | | Since our last round of releases, these crates have had either trivial changes, or changes that did not affect their APIs. Therefore we are bumping their versions, but not changing which versions of them other crates depend on.
* | Merge branch 'ahf/fix-windows-anon-home' into 'main'Nick Mathewson2022-08-311-3/+4
|\ \ | |/ |/| | | | | Fix broken build and tests after arti!700. See merge request tpo/core/arti!714
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-27 18:14:09 +0000