aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | tor-netdoc: drop a done TODOIan Jackson2026-07-151-3/+0
| | | | | | | | | | | | | | | | | | | | torspec!499 is merged.
| * | | | tor-netdoc tests: Test consensus verification error casesIan Jackson2026-07-153-5/+104
| | | | |
| * | | | tor-netdoc tests: Break out prep_netstatus_verify (fmt)Ian Jackson2026-07-151-6/+1
| | | | |
| * | | | tor-netdoc tests: Break out prep_netstatus_verifyIan Jackson2026-07-151-18/+32
| | | | |
| * | | | tor-netdoc tests: Test roundtrip of subset of live dataIan Jackson2026-07-152-2/+55
| | | | | | | | | | | | | | | | | | | | With facility to test roundtrip of whole consensus.
| * | | | tor-netdoc tests: Run new testdata-live-download scriptIan Jackson2026-07-153-0/+473
| | | | |
| * | | | tor-netdoc tests: Provide new testdata-live-download scriptIan Jackson2026-07-153-0/+78
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I have confimed the consent of the operators of the relays listed in the script. The rationale for using .entire.FOO filenames for the curl outputs will become clear shortly.
| * | | | tor-netdoc: Add some missing "retain-unknown" cfg gates to testsIan Jackson2026-07-151-4/+4
| | | | | | | | | | | | | | | | | | | | Nothing in CI tests incomplete without retain-unknown, apparently.
| * | | | tor-netdoc: Now that poc is gone, make some things no longer pub(crate)Ian Jackson2026-07-151-9/+4
| | | | |
| * | | | tor-netdoc: Abolish pocIan Jackson2026-07-155-421/+0
| | | | |
| * | | | tor-dirserver: Use "plain" consensus terminology rather than "ns" (fmt)Ian Jackson2026-07-151-1/+4
| | | | |
| * | | | tor-dirserver: Use "plain" consensus terminology rather than "ns"Ian Jackson2026-07-151-12/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It doesn't make sense to say that a plain consensus is an "ns" consensus, because "ns" stands for "network status" and all consensus flavours, and indeed votes, are network statusus. That's why tor-netdoc now uses "plain". Use that here too.
| * | | | tor-dirserver: Use real consensus types, not poc (fmt)Ian Jackson2026-07-151-4/+1
| | | | |
| * | | | tor-dirserver: Use real consensus types, not pocIan Jackson2026-07-151-3/+2
|/ / / /
* | | | Merge branch 'spin' into 'main'gabi-2502026-07-151-2/+2
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | Update spin to 0.9.8 See merge request tpo/core/arti!4208
| * | | | Update spin to 0.9.8Ian Jackson2026-07-151-2/+2
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes cargo-audit failure, due to spin 0.9.8 being yanked: The changelog entry for 0.9.9 says: > ### Fixed > > - Unsoundness in `Once::force_into_inner`, `Once::try_into_inner`, and > `Once::into_inner_unchecked`. \[...] In our stack, spin <- lazy_static 1.5.0 (only). lazy_static 1.5.0 (git tag) has no hits for `into_inner`. So I think we don't have any calls to the previously-unsound methods.
* | | | Merge branch 'crossbeam-epoch' into 'main'Jim Newsome2026-07-131-2/+2
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | maint/cargo-audit: Bump crossbeam-epoch to address RUSTSEC-2026-0204 See merge request tpo/core/arti!4207
| * | | | maint/cargo-audit: Bump crossbeam-epoch to address RUSTSEC-2026-0204Gabriela Moldovan2026-07-131-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | RUSTSEC-2026-0204 doesn't affect Arti, so this won't need a TROVE. I checked using the procedure documented under "Checking whether we are affected by a RUSTSEC" in `doc/dev/SecurityResponse.md`. I applied the following patch to my local `crossbeam-epoch` to remove the affected impls, and confirmed that Arti still builds successfully with it: ```diff diff --git a/crossbeam-epoch/src/atomic.rs b/crossbeam-epoch/src/atomic.rs index 41b4cd91..8b9b3a01 100644 --- a/crossbeam-epoch/src/atomic.rs +++ b/crossbeam-epoch/src/atomic.rs @@ -939,14 +939,6 @@ impl<T: ?Sized + Pointable> fmt::Debug for Atomic<T> { } } -impl<T: ?Sized + Pointable> fmt::Pointer for Atomic<T> { - fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result { - let data = self.data.load(Ordering::SeqCst); - let (raw, _) = decompose_tag::<T>(data); - fmt::Pointer::fmt(&(unsafe { T::deref(raw) as *const _ }), f) - } -} - impl<T: ?Sized + Pointable> Clone for Atomic<T> { /// Returns a copy of the atomic value. /// @@ -1660,12 +1652,6 @@ impl<T: ?Sized + Pointable> fmt::Debug for Shared<'_, T> { } } -impl<T: ?Sized + Pointable> fmt::Pointer for Shared<'_, T> { - fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result { - fmt::Pointer::fmt(&(unsafe { self.deref() as *const _ }), f) - } -} - impl<T: ?Sized + Pointable> Default for Shared<'_, T> { fn default() -> Self { Shared::null() ``` Note: the reason the `fmt::Pointer` impls I removed above look slightly different from the ones in the [crossbeam-rs MR] from the RUSTSEC page is because my patched `crossbeam-epoch` is based on the `crossbeam-epoch-0.9.18` tag rather than `main`. [crossbeam-rs MR]: https://github.com/crossbeam-rs/crossbeam/pull/1273/files
* | | | | Merge branch 'clippy_warning' into 'main'Jim Newsome2026-07-1331-64/+57
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | multiple crates: Fix clippy warnings See merge request tpo/core/arti!4203
| * | | | arti: subcommands: keys: Fix clippy::for-kv-maphjrgrn2026-07-131-2/+2
| | | | |
| * | | | arti-client: Fix formattinghjrgrn2026-07-102-9/+2
| | | | |
| * | | | tor-persist: Fix clippy warninghjrgrn2026-07-101-1/+1
| | | | |
| * | | | multiple crates: Fix clippy warningshjrgrn2026-07-1023-42/+42
| | | | |
| * | | | fs-mistrust: Fix clippy warningshjrgrn2026-07-101-1/+1
| | | | |
| * | | | safelog: Fix clippy warningshjrgrn2026-07-101-5/+5
| | | | |
| * | | | maint: fixup-features: Fix clippy warningshjrgrn2026-07-101-4/+4
| | | | |
| * | | | test-temp-dir: Fix clippy warninghjrgrn2026-07-101-2/+2
| | | | |
| * | | | tor-error: Fix clippy warningshjrgrn2026-07-102-2/+2
| | | | |
| * | | | retry-error: Fix clippy warninghjrgrn2026-07-101-1/+1
| | |/ / | |/| |
* | | | Merge branch 'upgrade-cipher' into 'main'gabi-2502026-07-1311-61/+126
|\ \ \ \ | |/ / / |/| | | | | | | | | | | Upgrade cipher, aes, and ctr. See merge request tpo/core/arti!4195
| * | | Upgrade cipher, aes, and ctr.Nick Mathewson2026-07-1311-61/+126
| | | |
* | | | Merge branch 'onion-svc-negotiate-v2' into 'main'Nick Mathewson2026-07-0227-92/+724
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Negotiate flowcontrol-cc and CGO on onion services Closes #2473 and #1948 See merge request tpo/core/arti!4135
| * | | | Change HS descriptor sendme_inc into a NonZeroU8Nick Mathewson2026-07-024-9/+12
| | | | | | | | | | | | | | | | | | | | | | | | | This saves us from having to check whether it is 0, and better represents what the type is allowed to be.
| * | | | hs: Add a TODO about #2598 refactoringNick Mathewson2026-07-022-0/+6
| | | | |
| * | | | Do not incluede negotiate_subproto in subproto_requestNick Mathewson2026-07-022-4/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I had incorrectly thought that this was necessary. Fortunately, @opara looked at the spec. :) We do, however, still need to _advertise_ negotiate_subproto.
| * | | | Cargo plumbing to expose HS extension negotiationNick Mathewson2026-07-022-0/+9
| | | | |
| * | | | hsclient: Support protocol negotiation for CGO and flowctrl-ccNick Mathewson2026-07-028-13/+208
| | | | |
| * | | | hsservice: Accept and negotiate protocol extensions.Nick Mathewson2026-07-022-4/+93
| | | | |
| * | | | tor-units: impl From<BoundedInt<1, 254>> for u8.Nick Mathewson2026-07-021-0/+6
| | | | |
| * | | | hsservice: Advertise flowctrl and cgo as appropriate.Nick Mathewson2026-07-025-0/+92
| | | | | | | | | | | | | | | | | | | | | | | | | We put this behind a feature because we probably want to test this out before we enable it.
| * | | | netdoc: Add new capability negotiation pieces to hsdesc.Nick Mathewson2026-07-024-5/+174
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The "flow-control" item is documented in proposal 324 section 9.1; there's a ticket (torspec#418) to document it. The "proto" item is documented at https://spec.torproject.org/rend-spec/hsdesc-encrypt.html#item:proto
| * | | | cell: Accessors for more intro extensions.Nick Mathewson2026-07-021-7/+16
| | | | |
| * | | | cell: Make "extlist" generate methods to access variants.Nick Mathewson2026-07-021-0/+18
| | | | | | | | | | | | | | | | | | | | | | | | | This will simplify the case where we need to look up a particular extension in an ExtList.
| * | | | proto: Allow HsV3 to use cgo.Nick Mathewson2026-07-021-2/+8
| | | | |
| * | | | proto: Do not automatically disable CC with hsv3.Nick Mathewson2026-07-022-20/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We _already_ do not include FLOWCTRL_CC as a listed protocol among the capabilities we provide, when we make a virtual hop. This branch will make that behavior even more certain, by not looking at required-client-protocols any longer.
| * | | | proto: log virtual hop additions at trace.Nick Mathewson2026-07-021-0/+2
| | | | | | | | | | | | | | | | | | | | We do something similar with non-virtual hops at !4076.
| * | | | proto: Improve/clarify documentation on extend_virtual.Nick Mathewson2026-07-021-0/+8
| | | | |
| * | | | protover: New constructor taking kind and versionsNick Mathewson2026-07-021-0/+17
| | | | | | | | | | | | | | | | | | | | We'll want this for the flow-control line in hsdescs.
| * | | | protover: Extract version-list parsing to a new functionNick Mathewson2026-07-021-41/+48
| | | | | | | | | | | | | | | | | | | | The patch looks complicated, but this is just code movement.
* | | | | Merge branch 'rangemap-mutate-range' into 'main'Ian Jackson2026-07-026-0/+327
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | tor-netdoc: rangemap_mutate_range: New function See merge request tpo/core/arti!4190