1
62%
development: 62%

Ran 28 Jul 2026 07:34AM UTC

Files 703

Run time 24s

Badge

Embed ▾

Committed 28 Jul 2026 06:22AM UTC coverage: 61.008% (+0.006%) from 61.002%

Job # 30334611459.1

Build Type

push

github

Committed by

web-flow

Commit Message

fix: libtor ports and passwords (#7933)

Description
---
Fixes: Tor::default() (tor.rs:55-66) yields an unauthenticated control
port with hardcoded world-writable /tmp/tor-data (holds onion-service
private keys) and /tmp/tor.log; a live footgun for any downstream user.
Fixes: Tor data dir created with umask perms (tor.rs:106); set 0700
explicitly.
Fixes: TOCTOU race in get_available_ports(); prefer Tor's *PortAuto.
Fixes: control passphrase not zeroized; unwrap on multiaddr parse. -
Positive: 178-bit CSPRNG passphrase, correctly redacted from all logs.

Coverage Stats

71547 of 117275 relevant lines covered (61.01%)

222896.32 hits per line

tari-project / tari / 30334611459 / 1
62%
development: 62%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 30334611459.1

tari-project / tari / 30334611459 / 1 62% development: 62%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 30334611459.1

tari-project / tari / 30334611459 / 1
62%
development: 62%

README BADGES
x