Skip to content

Expose channel_id / counterparty_node_id in BumpTransaction event #2873

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

tnull
Copy link
Contributor

@tnull tnull commented Feb 5, 2024

A client node might choose not to handle Event::BumptTransaction events and leave bumping / Anchor output spending to a trusted counterparty.

However, Event::BumptTransaction currently doesn't offer any clear indication what channel and/or counterparty it is referring to. In order to allow filtering these events, we here expose the channel_id and counterparty_node_id fields.

@tnull tnull requested a review from wpaulino February 5, 2024 13:52
Copy link

coderabbitai bot commented Feb 5, 2024

Note

Reviews Paused

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share

Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>.
    • Generate unit-tests for this file.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit tests for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai generate interesting stats about this repository from git and render them as a table.
    • @coderabbitai show all the console.log statements in this repository.
    • @coderabbitai read src/utils.ts and generate unit tests.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (invoked as PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger a review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai help to get help.

Additionally, you can add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.

CodeRabbit Configration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • The JSON schema for the configuration file is available here.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/coderabbit-overrides.v2.json

CodeRabbit Discord Community

Join our Discord Community to get help, request features, and share feedback.

@tnull
Copy link
Contributor Author

tnull commented Feb 5, 2024

@coderabbitai pause

Copy link
Member

@shaavan shaavan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Concept ACK

The description of BumpTransactionEvent reads that:

/// Indicates that a channel featuring anchor outputs is to be closed by broadcasting the local
/// commitment transaction.

Hence it seems most logical for this event to contain information about the Channel_id. Also, the counterparty_node_id is an important piece of information and can be useful when handling channel close events like BumpTransactionEvent. Adding it preemptively to the event makes sure that it's readily available when needed, leading to clean code.

I think we can go about adding the test coverage for the added changes!

wpaulino
wpaulino previously approved these changes Feb 5, 2024
@tnull tnull force-pushed the 2024-02-expose-channel-details-in-bte branch from e9e4e45 to 40ef505 Compare February 6, 2024 13:44
@tnull
Copy link
Contributor Author

tnull commented Feb 6, 2024

Force-pushed with minor fixups:

> git diff-tree -U2 e9e4e4582 40ef505bd
diff --git a/lightning/src/events/bump_transaction.rs b/lightning/src/events/bump_transaction.rs
index 638785c9f..dc461c6a9 100644
--- a/lightning/src/events/bump_transaction.rs
+++ b/lightning/src/events/bump_transaction.rs
@@ -150,10 +150,6 @@ pub enum BumpTransactionEvent {
        ChannelClose {
                /// The `channel_id` of the channel which has been closed.
-               ///
-               /// This field will be `None` for objects serialized prior to LDK 0.0.122.
                channel_id: Option<ChannelId>,
                /// Counterparty in the closed channel.
-               ///
-               /// This field will be `None` for objects serialized prior to LDK 0.0.122.
                counterparty_node_id: Option<PublicKey>,
                /// The unique identifier for the claim of the anchor output in the commitment transaction.
@@ -211,10 +207,6 @@ pub enum BumpTransactionEvent {
        HTLCResolution {
                /// The `channel_id` of the channel which has been closed.
-               ///
-               /// This field will be `None` for objects serialized prior to LDK 0.0.122.
                channel_id: Option<ChannelId>,
                /// Counterparty in the closed channel.
-               ///
-               /// This field will be `None` for objects serialized prior to LDK 0.0.122.
                counterparty_node_id: Option<PublicKey>,
                /// The unique identifier for the claim of the HTLCs in the confirmed commitment

dunxen
dunxen previously approved these changes Feb 6, 2024
@codecov-commenter
Copy link

codecov-commenter commented Feb 6, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (7c94636) 89.17% compared to head (5b5c874) 90.39%.
Report is 31 commits behind head on main.

❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #2873      +/-   ##
==========================================
+ Coverage   89.17%   90.39%   +1.22%     
==========================================
  Files         116      116              
  Lines       93252   100679    +7427     
  Branches    93252   100679    +7427     
==========================================
+ Hits        83157    91011    +7854     
+ Misses       7567     7247     -320     
+ Partials     2528     2421     -107     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Copy link
Member

@shaavan shaavan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

Makes perfect sense to not say This field will be None for objects serialized prior to LDK 0.0.122. for fields that are not serialized!
Btw, great catch, @dunxen :)

Also, a small test coverage might be good to have, but the PR works just fine with it too IMO!

@wpaulino
Copy link
Contributor

wpaulino commented Feb 6, 2024

We should be able to get rid of the options as well since the event isn't serialized.

@tnull tnull force-pushed the 2024-02-expose-channel-details-in-bte branch from 40ef505 to 3f746a3 Compare February 6, 2024 18:47
@tnull
Copy link
Contributor Author

tnull commented Feb 6, 2024

We should be able to get rid of the options as well since the event isn't serialized.

True, now did that for the channel_id, but we can't for counterparty_node_id I'm afraid as that will only be present for ChannelMonitors serialized with v0.0.110 and above, and we support back to v0.0.99.

Amended to add the following changes:

> git diff-tree -U2 40ef505bd 3f746a300
diff --git a/lightning/src/chain/channelmonitor.rs b/lightning/src/chain/channelmonitor.rs
index 7a3ebc676..e7e68297a 100644
--- a/lightning/src/chain/channelmonitor.rs
+++ b/lightning/src/chain/channelmonitor.rs
@@ -2932,5 +2932,5 @@ impl<Signer: WriteableEcdsaChannelSigner> ChannelMonitorImpl<Signer> {
                                        package_target_feerate_sat_per_1000_weight, commitment_tx, anchor_output_idx,
                                } => {
-                                       let channel_id = Some(self.channel_id);
+                                       let channel_id = self.channel_id;
                                        let counterparty_node_id = self.counterparty_node_id;
                                        let commitment_txid = commitment_tx.txid();
@@ -2963,5 +2963,5 @@ impl<Signer: WriteableEcdsaChannelSigner> ChannelMonitorImpl<Signer> {
                                        target_feerate_sat_per_1000_weight, htlcs, tx_lock_time,
                                } => {
-                                       let channel_id = Some(self.channel_id);
+                                       let channel_id = self.channel_id;
                                        let counterparty_node_id = self.counterparty_node_id;
                                        let mut htlc_descriptors = Vec::with_capacity(htlcs.len());
diff --git a/lightning/src/events/bump_transaction.rs b/lightning/src/events/bump_transaction.rs
index dc461c6a9..fac561763 100644
--- a/lightning/src/events/bump_transaction.rs
+++ b/lightning/src/events/bump_transaction.rs
@@ -150,5 +150,5 @@ pub enum BumpTransactionEvent {
        ChannelClose {
                /// The `channel_id` of the channel which has been closed.
-               channel_id: Option<ChannelId>,
+               channel_id: ChannelId,
                /// Counterparty in the closed channel.
                counterparty_node_id: Option<PublicKey>,
@@ -207,5 +207,5 @@ pub enum BumpTransactionEvent {
        HTLCResolution {
                /// The `channel_id` of the channel which has been closed.
-               channel_id: Option<ChannelId>,
+               channel_id: ChannelId,
                /// Counterparty in the closed channel.
                counterparty_node_id: Option<PublicKey>,

@wpaulino
Copy link
Contributor

wpaulino commented Feb 6, 2024

True, now did that for the channel_id, but we can't for counterparty_node_id I'm afraid as that will only be present for ChannelMonitors serialized with v0.0.110 and above, and we support back to v0.0.99.

Since the event is anchors-specific, which was introduced in 116, it should be fine?

@tnull
Copy link
Contributor Author

tnull commented Feb 6, 2024

True, now did that for the channel_id, but we can't for counterparty_node_id I'm afraid as that will only be present for ChannelMonitors serialized with v0.0.110 and above, and we support back to v0.0.99.

Since the event is anchors-specific, which was introduced in 116, it should be fine?

But in order to populate it we'd need to call unwrap on ChannelMonitor::counterparty_node_id which would potentially panic, no?

@wpaulino
Copy link
Contributor

wpaulino commented Feb 6, 2024

ChannelMonitors for anchor channels can only be generated with 0.0.116 or later so the counterparty_node_id should be set.

A client node might choose not to handle `Event::BumptTransaction`
events and leave bumping / Anchor output spending to a trusted
counterparty.

However, `Event::BumptTransaction` currently doesn't offer any clear
indication what channel and/or counterparty it is referring to. In order
to allow filtering these events, we here expose the `channel_id` and
`counterparty_node_id` fields.
@tnull tnull force-pushed the 2024-02-expose-channel-details-in-bte branch from 3f746a3 to 5b5c874 Compare February 6, 2024 20:02
@tnull
Copy link
Contributor Author

tnull commented Feb 6, 2024

ChannelMonitors for anchor channels can only be generated with 0.0.116 or later so the counterparty_node_id should be set.

Yeah, you're right. Grrr, really dislike introducing more unwraps, still:

> git diff-tree -U2 3f746a300 5b5c87464
diff --git a/lightning/src/chain/channelmonitor.rs b/lightning/src/chain/channelmonitor.rs
index e7e68297a..cadc3524e 100644
--- a/lightning/src/chain/channelmonitor.rs
+++ b/lightning/src/chain/channelmonitor.rs
@@ -2933,5 +2933,8 @@ impl<Signer: WriteableEcdsaChannelSigner> ChannelMonitorImpl<Signer> {
                                } => {
                                        let channel_id = self.channel_id;
-                                       let counterparty_node_id = self.counterparty_node_id;
+                                       // unwrap safety: `ClaimEvent`s are only available for Anchor channels,
+                                       // introduced with v0.0.116. counterparty_node_id is guaranteed to be `Some`
+                                       // since v0.0.110.
+                                       let counterparty_node_id = self.counterparty_node_id.unwrap();
                                        let commitment_txid = commitment_tx.txid();
                                        debug_assert_eq!(self.current_holder_commitment_tx.txid, commitment_txid);
@@ -2964,5 +2967,8 @@ impl<Signer: WriteableEcdsaChannelSigner> ChannelMonitorImpl<Signer> {
                                } => {
                                        let channel_id = self.channel_id;
-                                       let counterparty_node_id = self.counterparty_node_id;
+                                       // unwrap safety: `ClaimEvent`s are only available for Anchor channels,
+                                       // introduced with v0.0.116. counterparty_node_id is guaranteed to be `Some`
+                                       // since v0.0.110.
+                                       let counterparty_node_id = self.counterparty_node_id.unwrap();
                                        let mut htlc_descriptors = Vec::with_capacity(htlcs.len());
                                        for htlc in htlcs {
diff --git a/lightning/src/events/bump_transaction.rs b/lightning/src/events/bump_transaction.rs
index fac561763..cb011b79a 100644
--- a/lightning/src/events/bump_transaction.rs
+++ b/lightning/src/events/bump_transaction.rs
@@ -152,5 +152,5 @@ pub enum BumpTransactionEvent {
                channel_id: ChannelId,
                /// Counterparty in the closed channel.
-               counterparty_node_id: Option<PublicKey>,
+               counterparty_node_id: PublicKey,
                /// The unique identifier for the claim of the anchor output in the commitment transaction.
                ///
@@ -209,5 +209,5 @@ pub enum BumpTransactionEvent {
                channel_id: ChannelId,
                /// Counterparty in the closed channel.
-               counterparty_node_id: Option<PublicKey>,
+               counterparty_node_id: PublicKey,
                /// The unique identifier for the claim of the HTLCs in the confirmed commitment
                /// transaction.

@TheBlueMatt TheBlueMatt merged commit a9d73c2 into lightningdevkit:main Feb 7, 2024
k0k0ne pushed a commit to bitlightlabs/rust-lightning that referenced this pull request Sep 30, 2024
v0.0.123 - May 08, 2024 - "BOLT12 Dust Sweeping"

API Updates
===========

 * To reduce risk of force-closures and improve HTLC reliability the default
   dust exposure limit has been increased to
   `MaxDustHTLCExposure::FeeRateMultiplier(10_000)`. Users with existing
   channels might want to consider using
   `ChannelManager::update_channel_config` to apply the new default (lightningdevkit#3045).
 * `ChainMonitor::archive_fully_resolved_channel_monitors` is now provided to
   remove from memory `ChannelMonitor`s that have been fully resolved on-chain
   and are now not needed. It uses the new `Persist::archive_persisted_channel`
   to inform the storage layer that such a monitor should be archived (lightningdevkit#2964).
 * An `OutputSweeper` is now provided which will automatically sweep
   `SpendableOutputDescriptor`s, retrying until the sweep confirms (lightningdevkit#2825).
 * After initiating an outbound channel, a peer disconnection no longer results
   in immediate channel closure. Rather, if the peer is reconnected before the
   channel times out LDK will automatically retry opening it (lightningdevkit#2725).
 * `PaymentPurpose` now has separate variants for BOLT12 payments, which
   include fields from the `invoice_request` as well as the `OfferId` (lightningdevkit#2970).
 * `ChannelDetails` now includes a list of in-flight HTLCs (lightningdevkit#2442).
 * `Event::PaymentForwarded` now includes `skimmed_fee_msat` (lightningdevkit#2858).
 * The `hashbrown` dependency has been upgraded and the use of `ahash` as the
   no-std hash table hash function has been removed. As a consequence, LDK's
   `Hash{Map,Set}`s no longer feature several constructors when LDK is built
   with no-std; see the `util::hash_tables` module instead. On platforms that
   `getrandom` supports, setting the `possiblyrandom/getrandom` feature flag
   will ensure hash tables are resistant to HashDoS attacks, though the
   `possiblyrandom` crate should detect most common platforms (lightningdevkit#2810, lightningdevkit#2891).
 * `ChannelMonitor`-originated requests to the `ChannelSigner` can now fail and
   be retried using `ChannelMonitor::signer_unblocked` (lightningdevkit#2816).
 * `SpendableOutputDescriptor::to_psbt_input` now includes the `witness_script`
   where available as well as new proprietary data which can be used to
   re-derive some spending keys from the base key (lightningdevkit#2761, lightningdevkit#3004).
 * `OutPoint::to_channel_id` has been removed in favor of
   `ChannelId::v1_from_funding_outpoint` in preparation for v2 channels with a
   different `ChannelId` derivation scheme (lightningdevkit#2797).
 * `PeerManager::get_peer_node_ids` has been replaced with `list_peers` and
   `peer_by_node_id`, which provide more details (lightningdevkit#2905).
 * `Bolt11Invoice::get_payee_pub_key` is now provided (lightningdevkit#2909).
 * `Default[Message]Router` now take an `entropy_source` argument (lightningdevkit#2847).
 * `ClosureReason::HTLCsTimedOut` has been separated out from
   `ClosureReason::HolderForceClosed` as it is the most common case (lightningdevkit#2887).
 * `ClosureReason::CooperativeClosure` is now split into
   `{Counterparty,Locally}Initiated` variants (lightningdevkit#2863).
 * `Event::ChannelPending::channel_type` is now provided (lightningdevkit#2872).
 * `PaymentForwarded::{prev,next}_user_channel_id` are now provided (lightningdevkit#2924).
 * Channel init messages have been refactored towards V2 channels (lightningdevkit#2871).
 * `BumpTransactionEvent` now contains the channel and counterparty (lightningdevkit#2873).
 * `util::scid_utils` is now public, with some trivial utilities to examine
   short channel ids (lightningdevkit#2694).
 * `DirectedChannelInfo::{source,target}` are now public (lightningdevkit#2870).
 * Bounds in `lightning-background-processor` were simplified by using
   `AChannelManager` (lightningdevkit#2963).
 * The `Persist` impl for `KVStore` no longer requires `Sized`, allowing for
   the use of `dyn KVStore` as `Persist` (lightningdevkit#2883, lightningdevkit#2976).
 * `From<PaymentPreimage>` is now implemented for `PaymentHash` (lightningdevkit#2918).
 * `NodeId::from_slice` is now provided (lightningdevkit#2942).
 * `ChannelManager` deserialization may now fail with `DangerousValue` when
    LDK's persistence API was violated (lightningdevkit#2974).

Bug Fixes
=========

 * Excess fees on counterparty commitment transactions are now included in the
   dust exposure calculation. This lines behavior up with some cases where
   transaction fees can be burnt, making them effectively dust exposure (lightningdevkit#3045).
 * `Future`s used as an `std::...::Future` could grow in size unbounded if it
   was never woken. For those not using async persistence and using the async
   `lightning-background-processor`, this could cause a memory leak in the
   `ChainMonitor` (lightningdevkit#2894).
 * Inbound channel requests that fail in
   `ChannelManager::accept_inbound_channel` would previously have stalled from
   the peer's perspective as no `error` message was sent (lightningdevkit#2953).
 * Blinded path construction has been tuned to select paths more likely to
   succeed, improving BOLT12 payment reliability (lightningdevkit#2911, lightningdevkit#2912).
 * After a reorg, `lightning-transaction-sync` could have failed to follow a
   transaction that LDK needed information about (lightningdevkit#2946).
 * `RecipientOnionFields`' `custom_tlvs` are now propagated to recipients when
   paying with blinded paths (lightningdevkit#2975).
 * `Event::ChannelClosed` is now properly generated and peers are properly
   notified for all channels that as a part of a batch channel open fail to be
   funded (lightningdevkit#3029).
 * In cases where user event processing is substantially delayed such that we
   complete multiple round-trips with our peers before a `PaymentSent` event is
   handled and then restart without persisting the `ChannelManager` after having
   persisted a `ChannelMonitor[Update]`, on startup we may have `Err`d trying to
   deserialize the `ChannelManager` (lightningdevkit#3021).
 * If a peer has relatively high latency, `PeerManager` may have failed to
   establish a connection (lightningdevkit#2993).
 * `ChannelUpdate` messages broadcasted for our own channel closures are now
   slightly more robust (lightningdevkit#2731).
 * Deserializing malformed BOLT11 invoices may have resulted in an integer
   overflow panic in debug builds (lightningdevkit#3032).
 * In exceedingly rare cases (no cases of this are known), LDK may have created
   an invalid serialization for a `ChannelManager` (lightningdevkit#2998).
 * Message processing latency handling BOLT12 payments has been reduced (lightningdevkit#2881).
 * Latency in processing `Event::SpendableOutputs` may be reduced (lightningdevkit#3033).

Node Compatibility
==================

 * LDK's blinded paths were inconsistent with other implementations in several
   ways, which have been addressed (lightningdevkit#2856, lightningdevkit#2936, lightningdevkit#2945).
 * LDK's messaging blinded paths now support the latest features which some
   nodes may begin relying on soon (lightningdevkit#2961).
 * LDK's BOLT12 structs have been updated to support some last-minute changes to
   the spec (lightningdevkit#3017, lightningdevkit#3018).
 * CLN v24.02 requires the `gossip_queries` feature for all peers, however LDK
   by default does not set it for those not using a `P2PGossipSync` (e.g. those
   using RGS). This change was reverted in CLN v24.02.2 however for now LDK
   always sets the `gossip_queries` feature. This change is expected to be
   reverted in a future LDK release (lightningdevkit#2959).

Security
========
0.0.123 fixes a denial-of-service vulnerability which we believe to be reachable
from untrusted input when parsing invalid BOLT11 invoices containing non-ASCII
characters.
 * BOLT11 invoices with non-ASCII characters in the human-readable-part may
   cause an out-of-bounds read attempt leading to a panic (lightningdevkit#3054). Note that all
   BOLT11 invoices containing non-ASCII characters are invalid.

In total, this release features 150 files changed, 19307 insertions, 6306
deletions in 360 commits since 0.0.121 from 17 authors, in alphabetical order:

 * Arik Sosman
 * Duncan Dean
 * Elias Rohrer
 * Evan Feenstra
 * Jeffrey Czyz
 * Keyue Bao
 * Matt Corallo
 * Orbital
 * Sergi Delgado Segura
 * Valentine Wallace
 * Willem Van Lint
 * Wilmer Paulino
 * benthecarman
 * jbesraa
 * olegkubrakov
 * optout
 * shaavan
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants