Conversation
- zero-copy frame decode/seal, no per-frame allocation - direct streaming download path (no segment task/channel) - 64KiB write coalescing, 32KiB read prefetch, h2-aligned frames - UUID stream registry, shared resolved shaper config - admission control: max_tunnels/max_connections/in-flight caps - fix: rotation Continue truncation, swallowed upstream write errors, DoT hangs, prefetch race killing tunnels, JSON frame cap, IPv6 CONNECT - validate in-flight/concurrency config bounds - rewrite CONFIGURATION.md; strip all source comments
- unit: 155 tests across all modules (dispatch routing matrix, PQ FSM ticket lifecycle, janitor pruning, DNS parse/transport, shaper EOF/Pending/stages, AEAD authentication, upload reorder overflow/timeout/replay, stream decoder, h2 error classification) - integration: 27 end-to-end tests (plain/encrypted/JSON tunnels, rotation with prefetch, admission 503, local proxy auth, bypass, mock DNS resolution/caching, PQ session resumption) - fix: classify h2 Kind::Reason errors as silent - extract ticket_is_valid and janitor prune helpers for testability
parse_response used Ord::clamp with unvalidated config bounds; min_ttl > max_ttl panicked the server on any successful resolution. Validate the bounds in init_dns and make the clamp order-safe regardless, with regression tests for both layers.
- remove tautological udp_recv_error_does_not_panic (assert is_err() || is_ok() never fails, duplicated the timeout path) - merge frame_cipher_roundtrip into encrypt_decrypt_roundtrip and the twin JSON padding tests into one loop (same code path) - replace always-true deterministic key-derivation asserts with domain-separation asserts (flip input byte, key must change) - add upload loop tests: full payload roundtrip with contiguous seqs, configured start_seq, failure propagation, no-request-on-empty-input - add connection actor tests: auth retry loop on one connection, CONNECT early-data buffering, request parse timeout
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.