1. 06 Aug, 2015 1 commit
    • Kenton Varda's avatar
      WIP JSON encoder/decoder library. Currently only encodes. · e3e9ce8d
      Kenton Varda authored
      The library allows for registering special handlers for specific types or fields. This is particluarly useful for overriding the way `Data` is encoded (since many approaches exist) or supporting encodings like EJSON or Q which extend JSON with special types encoded as objects with field names perfixed by dollar signs.
      
      Not integrated into build system yet (but builds nicely with Ekam). I think this is going to need to be a separate library, e.g. libcapnp-json, because clearly a lot of Cap'n Proto users don't need it at all.
      
      For the moment, this was written for use inside Sandstorm. There is no current need for a decoder, so I have not written that yet and have no immediate plans to do so. But it will be added before any official Cap'n Proto release, certainly. A simple recursive descent parser should be easy...
      e3e9ce8d
  2. 31 Jul, 2015 2 commits
  3. 29 Jul, 2015 1 commit
  4. 24 Jul, 2015 1 commit
  5. 23 Jul, 2015 2 commits
    • Kenton Varda's avatar
      Fix link errors. · 96e9663a
      Kenton Varda authored
      96e9663a
    • Kenton Varda's avatar
      Fix bug causing exception: "'Disembargo' of type 'senderLoopback' sent to an… · d4cd01e9
      Kenton Varda authored
      Fix bug causing exception: "'Disembargo' of type 'senderLoopback' sent to an object that does not point back to the sender."
      
      The problem happened when pipelined calls were made on a promised capability, but then that capability turned out to be null. The promise resolving code incorrectly interpreted this as the remote promise having resolved to a local capability (because the "null" stub capability looks local), and so it would send a Disembargo message to flush the pipeline as required. However, the remote end would receive this Disembargo message and find it is addressed to a null capability, not a capability pointing back to the sender. This was treated as a protocol error, causing the receiver to close the connection.
      
      The solution is to explicitly identity "null" capabilities so that we can distinguish this case. This change also has the benefit that now when you copy a null capability between messages with foo.setCap(bar.getCap()), the pointer will be set null in the destination, rather than becoming a reference to a local broken capability.
      
      Thanks to David Renshaw for narrowing this down.
      d4cd01e9
  6. 22 Jul, 2015 1 commit
  7. 17 Jul, 2015 4 commits
  8. 12 Jul, 2015 2 commits
  9. 08 Jul, 2015 1 commit
  10. 03 Jul, 2015 3 commits
    • Kenton Varda's avatar
      Merge pull request #223 from mrdomino/no-eproto · cbd18b28
      Kenton Varda authored
      Workaround nonexistent EPROTO on OpenBSD
      cbd18b28
    • Steven Dee's avatar
      Workaround nonexistent EPROTO on OpenBSD · 156efd49
      Steven Dee authored
      Fixes #221.
      156efd49
    • Kenton Varda's avatar
      Refactor how messages are imbued with a capability table. · 5413038b
      Kenton Varda authored
      **The problem**
      
      The methods MessageReader::initCapTable() and MessageBuilder::getCapTable() always felt rather hacky. initCapTable() in particular feels like something that should be handled by the constructor. However, in practice, the cap table is often initialized based on a table encoded within the message itself. That is, an RPC message contains a "payload" which includes both the application-level message structure and a table of capabilities. The cap table has to be processed first, then initCapTable() is called on the overall message, before the application structure can safely be read.
      
      The really weird part about this is that even though the cap table only applies to one branch of the message (the payload), it is set on the *whole* MessageReader. This implies, for example, that it would be impossible to have a message that contains multiple payloads. We haven't had any need for such a thing, but an implemnetation that has such artificial limitations feels very wrong.
      
      MessageBuilder has similar issues going in the opposite direction.
      
      All of this ugliness potentially gets worse when we introduce "membranes". We want a way to intercept capabilities as they are being read from or written to an RPC payload. Currently, the only plausible way to do that is, again, to apply a transformation to all capabilities in the message. In practice it seems like this would work out OK, but it again feels wrong -- we really want to take a single Reader or Builder and "wrap" it so that transformations are applied on capabilities read/written through it.
      
      **The solution**
      
      This change fixes the problem by adding a new pointer to each struct/list Reader/Builder that tracks the current cap table. So, now a Reader or Builder for a particular sub-object can be "imbued" with a cap table without affecting any other existing Readers/Builders pointing into the same message. The cap table is inherited by child Readers/Builders obtained through the original one.
      
      This approach matches up nicely with membranes, which should make their implementation nice and clean.
      
      This change unfortunately means that Readers and Builders are now bigger, possibly with some performance impact.
      5413038b
  11. 28 Jun, 2015 1 commit
  12. 26 Jun, 2015 2 commits
  13. 23 Jun, 2015 3 commits
    • Kenton Varda's avatar
      Fix bug where calling a list setter using a list obtained from a similarly-typed… · 949f7353
      Kenton Varda authored
      Fix bug where calling a list setter using a list obtained from a similarly-typed getter, but where the underlying pointer was null, would write an incorrectly-typed pointer in the destination (specifically, an empty List(Void)). Now it sets an empty list of the correct type.
      949f7353
    • Kenton Varda's avatar
      2ed4b4e7
    • Kenton Varda's avatar
      Fixes #219, with POSSIBLE (but obscure) WIRE FORMAT BREAKAGE. · db7ca960
      Kenton Varda authored
      Unfortunately, the layout algorithm had a bug which caused incorrect layout when declaring a union whose lowest-ordinal field was of type Void and nested in an inner union. That is:
      
          union {
            a :union {
              b @0 :Void
              ...
            }
            ...
          }
      
      In this case, all the fields in the struct after the Void field -- including both unions' discriminants -- would end up misplaced. Although they did not end up overlapping (and therefore the incorrect layout "worked"), the result broke schema evolution rules around "retroactive unionization".
      
      Unfortunately, we must break compatibility with any protocol that happened to contain the above pattern. Luckily, it's a fairly obscure case. Unluckily, Cap'n Proto's own schema format contains such a pattern. Luckily, the use of this pattern was introduced in v0.6.x and therefore has not been in any release build so far.
      db7ca960
  14. 22 Jun, 2015 2 commits
  15. 14 Jun, 2015 1 commit
  16. 12 Jun, 2015 3 commits
  17. 11 Jun, 2015 4 commits
  18. 10 Jun, 2015 1 commit
  19. 09 Jun, 2015 1 commit
  20. 30 May, 2015 1 commit
  21. 29 May, 2015 2 commits
  22. 26 May, 2015 1 commit
    • Kenton Varda's avatar
      sed -r is a GNU extension, apparently, and due to stars aligning, this didn't… · 25be62be
      Kenton Varda authored
      sed -r is a GNU extension, apparently, and due to stars aligning, this didn't break the build, but led to a totally bogus soname on non-GNU systems. Argh.
      
      Apparently most systems (including GNU, undocumentedly) support -E instead, but perhaps the safest thing is to use a basic regular expression. Unfortunately on many systems ? and + are not available in basic regexes, but using * instead happens to work in our case.
      
      Thanks to @neverpanic for catching this.
      
      Fixes #210
      25be62be