Skip to content

Conversation

@tonyarnold
Copy link

This is a spike for my own learning to see what's involved in removing the C-backed UUID implementation in favour of a Swift version.

I'm happy to revise this, as I realise that the implementation of some of this isn't ideal.

@tonyarnold tonyarnold changed the title Port _CShims UUID to swift Port _CShims UUID to Swift May 16, 2023
}
if res != 0 {
return nil
public init?(version: Version = .v4, uuidString string: __shared String) {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This would be an ABI breakage, since we're removing the previous initializer.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That makes sense, thanks for letting me know Tony.

I restored the original initializers in c3cc89c, however I also understand that the changes in this PR are something that the team aren't ready to look at yet.

@parkera
Copy link
Contributor

parkera commented Jun 5, 2023

One interesting security feature of our UUID implementation is that it is designed to do its work in constant time regardless of the content of the UUID. e.g., for equality checking. This is done in order to defeat timing attacks. We would need to verify we keep that behavior with a new implementation.

}

static func v4_parse(uuidString string: __shared String) -> uuid_t? {
let components = string

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Based on #129 (comment), one obvious optimization we can do here is to guard against string.count. However, both String.count and String.UTF8View.count is not O(1), so I guess we should parse the string manually and throw if it’s malformed, including too short or too long?

@itingliu itingliu assigned itingliu and unassigned itingliu Nov 7, 2023
@itingliu itingliu requested a review from iCharlesHu November 7, 2023 22:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants