eric/geth
Watch
1
0
Fork
You've already forked geth
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: bound remote iroh line reads

Browse source
This commit is contained in:
Eric Wendland 2026-07-05 18:22:07 +02:00
commit ccd40f0224
5 changed files with 91 additions and 68 deletions
Download patch file Download diff file Expand all files Collapse all files

67
crates/geth-node/src/lib.rs
View file

@ -76,7 +76,10 @@ use tokio::io::{AsyncBufReadExt, AsyncWriteExt, BufReader};
use tokio::net::{TcpListener, TcpStream, UnixListener, UnixStream};
use tokio::sync::{mpsc, oneshot};
use tun_rs::{DeviceBuilder, Layer};
use wire::{finish_iroh_send, read_iroh_line};
use wire::{
PEER_CONTROL_LINE_MAX, STREAM_HANDSHAKE_LINE_MAX, WIRE_REQUEST_LINE_MAX, finish_iroh_send,
read_iroh_line,
};
#[derive(Debug, thiserror::Error)]
pub enum NodeError {
@ -1128,11 +1131,8 @@ async fn peer_ping(node: &LocalNode, peer_node: &str) -> Result<ControlResponse,
NodeError::IrohPeer(format!("peer ping request delivery failed: {error}"))
})?;
drop(send);
let mut response = String::new();
let mut reader = BufReader::new(recv);
reader.read_line(&mut response).await.map_err(|error| {
NodeError::IrohPeer(format!("peer ping response line read failed: {error}"))
})?;
let mut recv = recv;
let response = read_iroh_line(&mut recv, PEER_CONTROL_LINE_MAX).await?;
match geth_control::decode_peer_response(&response)? {
PeerControlResponse::Pong {
node_id,
@ -1243,12 +1243,8 @@ async fn peer_auth_check(
.await
.map_err(|error| NodeError::IrohPeer(error.to_string()))?;
drop(send);
let mut response = String::new();
let mut reader = BufReader::new(recv);
reader
.read_line(&mut response)
.await
.map_err(|error| NodeError::IrohPeer(error.to_string()))?;
let mut recv = recv;
let response = read_iroh_line(&mut recv, PEER_CONTROL_LINE_MAX).await?;
match geth_control::decode_peer_response(&response)? {
PeerControlResponse::AuthChecked {
node_id,
@ -2792,7 +2788,7 @@ async fn handle_local_pipe_tcp_stream(
.await
.map_err(|error| NodeError::IrohPeer(error.to_string()))?;
let mut remote_recv = remote_recv;
let line = read_iroh_line(&mut remote_recv, 64 * 1024).await?;
let line = read_iroh_line(&mut remote_recv, STREAM_HANDSHAKE_LINE_MAX).await?;
let response = geth_control::decode_pipe_wire_response(&line)?;
let local_response = match response {
PipeWireResponse::Connected {
@ -2910,7 +2906,7 @@ async fn handle_local_pipe_unix_stream(
.await
.map_err(|error| NodeError::IrohPeer(error.to_string()))?;
let mut remote_recv = remote_recv;
let line = read_iroh_line(&mut remote_recv, 64 * 1024).await?;
let line = read_iroh_line(&mut remote_recv, STREAM_HANDSHAKE_LINE_MAX).await?;
let response = geth_control::decode_pipe_wire_response(&line)?;
let local_response = match response {
PipeWireResponse::Connected {
@ -3120,7 +3116,7 @@ async fn handle_local_ssh_proxy_stream(
.await
.map_err(|error| NodeError::IrohPeer(error.to_string()))?;
let mut remote_recv = remote_recv;
let line = read_iroh_line(&mut remote_recv, 64 * 1024).await?;
let line = read_iroh_line(&mut remote_recv, STREAM_HANDSHAKE_LINE_MAX).await?;
let response = geth_control::decode_peer_response(&line)?;
let local_response = match response {
PeerControlResponse::SshProxyConnected {
@ -4141,12 +4137,9 @@ async fn handle_iroh_control_connection(
if alpn == display_alpn(geth_iroh::ALPN_OVERLAY) {
return handle_overlay_wire_connection(node, remote_endpoint_id, send, recv).await;
}
let mut request_line = String::new();
let mut reader = BufReader::new(recv);
let request_bytes = reader
.read_line(&mut request_line)
.await
.map_err(|error| NodeError::IrohPeer(error.to_string()))?;
let mut recv = recv;
let request_line = read_iroh_line(&mut recv, PEER_CONTROL_LINE_MAX).await?;
let request_bytes = request_line.len();
tracing::debug!(remote_endpoint_id = %log_remote_endpoint_id, alpn = %log_alpn, request_bytes, "read iroh peer-control request line");
let response = match geth_control::decode_peer_request(&request_line)? {
PeerControlRequest::Ping { peer_card, nonce } => {
@ -5179,14 +5172,9 @@ async fn handle_ssh_proxy_wire_connection(
node: LocalNode,
remote_endpoint_id: String,
mut send: iroh::endpoint::SendStream,
recv: iroh::endpoint::RecvStream,
mut recv: iroh::endpoint::RecvStream,
) -> Result<(), NodeError> {
let mut reader = BufReader::new(recv);
let mut line = String::new();
reader
.read_line(&mut line)
.await
.map_err(|error| NodeError::IrohPeer(error.to_string()))?;
let line = read_iroh_line(&mut recv, STREAM_HANDSHAKE_LINE_MAX).await?;
let request = geth_control::decode_peer_request(&line)?;
let PeerControlRequest::SshProxyConnect {
peer_card,
@ -5291,7 +5279,6 @@ async fn handle_ssh_proxy_wire_connection(
.await
.map_err(|error| NodeError::IrohPeer(error.to_string()))?;
let mut recv = reader.into_inner();
let (mut tcp_read, mut tcp_write) = tcp.into_split();
let inbound = async {
tokio::io::copy(&mut recv, &mut tcp_write)
@ -5314,14 +5301,9 @@ async fn handle_pipe_wire_connection(
node: LocalNode,
remote_endpoint_id: String,
mut send: iroh::endpoint::SendStream,
recv: iroh::endpoint::RecvStream,
mut recv: iroh::endpoint::RecvStream,
) -> Result<(), NodeError> {
let mut reader = BufReader::new(recv);
let mut line = String::new();
reader
.read_line(&mut line)
.await
.map_err(|error| NodeError::IrohPeer(error.to_string()))?;
let line = read_iroh_line(&mut recv, WIRE_REQUEST_LINE_MAX).await?;
match geth_control::decode_pipe_wire_request(&line)? {
PipeWireRequest::Send {
peer_card,
@ -5361,7 +5343,7 @@ async fn handle_pipe_wire_connection(
bearer_proof,
},
send,
reader.into_inner(),
recv,
)
.await
}
@ -5381,7 +5363,7 @@ async fn handle_pipe_wire_connection(
bearer_proof,
},
send,
reader.into_inner(),
recv,
)
.await
}
@ -5392,14 +5374,9 @@ async fn handle_overlay_wire_connection(
node: LocalNode,
remote_endpoint_id: String,
mut send: iroh::endpoint::SendStream,
recv: iroh::endpoint::RecvStream,
mut recv: iroh::endpoint::RecvStream,
) -> Result<(), NodeError> {
let mut reader = BufReader::new(recv);
let mut line = String::new();
reader
.read_line(&mut line)
.await
.map_err(|error| NodeError::IrohPeer(error.to_string()))?;
let line = read_iroh_line(&mut recv, WIRE_REQUEST_LINE_MAX).await?;
let response = match geth_control::decode_overlay_wire_request(&line)? {
OverlayWireRequest::Packet {
peer_card,