40969b180af9d6904d79eb29d8cdf05b3c624bc9
[rust-lightning] / lightning / src / routing / gossip.rs
1 // This file is Copyright its original authors, visible in version control
2 // history.
3 //
4 // This file is licensed under the Apache License, Version 2.0 <LICENSE-APACHE
5 // or http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
6 // <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your option.
7 // You may not use this file except in accordance with one or both of these
8 // licenses.
9
10 //! The [`NetworkGraph`] stores the network gossip and [`P2PGossipSync`] fetches it from peers
11
12 use bitcoin::secp256k1::constants::PUBLIC_KEY_SIZE;
13 use bitcoin::secp256k1::PublicKey;
14 use bitcoin::secp256k1::Secp256k1;
15 use bitcoin::secp256k1;
16
17 use bitcoin::hashes::sha256d::Hash as Sha256dHash;
18 use bitcoin::hashes::Hash;
19 use bitcoin::hashes::hex::FromHex;
20 use bitcoin::hash_types::BlockHash;
21
22 use bitcoin::network::constants::Network;
23 use bitcoin::blockdata::constants::genesis_block;
24
25 use crate::events::{MessageSendEvent, MessageSendEventsProvider};
26 use crate::ln::features::{ChannelFeatures, NodeFeatures, InitFeatures};
27 use crate::ln::msgs::{DecodeError, ErrorAction, Init, LightningError, RoutingMessageHandler, NetAddress, MAX_VALUE_MSAT};
28 use crate::ln::msgs::{ChannelAnnouncement, ChannelUpdate, NodeAnnouncement, GossipTimestampFilter};
29 use crate::ln::msgs::{QueryChannelRange, ReplyChannelRange, QueryShortChannelIds, ReplyShortChannelIdsEnd};
30 use crate::ln::msgs;
31 use crate::routing::utxo::{self, UtxoLookup, UtxoResolver};
32 use crate::util::ser::{Readable, ReadableArgs, Writeable, Writer, MaybeReadable};
33 use crate::util::logger::{Logger, Level};
34 use crate::util::scid_utils::{block_from_scid, scid_from_parts, MAX_SCID_BLOCK};
35 use crate::util::string::PrintableString;
36 use crate::util::indexed_map::{IndexedMap, Entry as IndexedMapEntry};
37
38 use crate::io;
39 use crate::io_extras::{copy, sink};
40 use crate::prelude::*;
41 use core::{cmp, fmt};
42 use core::convert::TryFrom;
43 use crate::sync::{RwLock, RwLockReadGuard, LockTestExt};
44 #[cfg(feature = "std")]
45 use core::sync::atomic::{AtomicUsize, Ordering};
46 use crate::sync::Mutex;
47 use core::ops::{Bound, Deref};
48 use core::str::FromStr;
49
50 #[cfg(feature = "std")]
51 use std::time::{SystemTime, UNIX_EPOCH};
52
53 /// We remove stale channel directional info two weeks after the last update, per BOLT 7's
54 /// suggestion.
55 const STALE_CHANNEL_UPDATE_AGE_LIMIT_SECS: u64 = 60 * 60 * 24 * 14;
56
57 /// We stop tracking the removal of permanently failed nodes and channels one week after removal
58 const REMOVED_ENTRIES_TRACKING_AGE_LIMIT_SECS: u64 = 60 * 60 * 24 * 7;
59
60 /// The maximum number of extra bytes which we do not understand in a gossip message before we will
61 /// refuse to relay the message.
62 const MAX_EXCESS_BYTES_FOR_RELAY: usize = 1024;
63
64 /// Maximum number of short_channel_ids that will be encoded in one gossip reply message.
65 /// This value ensures a reply fits within the 65k payload limit and is consistent with other implementations.
66 const MAX_SCIDS_PER_REPLY: usize = 8000;
67
68 /// Represents the compressed public key of a node
69 #[derive(Clone, Copy)]
70 pub struct NodeId([u8; PUBLIC_KEY_SIZE]);
71
72 impl NodeId {
73         /// Create a new NodeId from a public key
74         pub fn from_pubkey(pubkey: &PublicKey) -> Self {
75                 NodeId(pubkey.serialize())
76         }
77
78         /// Get the public key slice from this NodeId
79         pub fn as_slice(&self) -> &[u8] {
80                 &self.0
81         }
82
83         /// Get the public key from this NodeId
84         pub fn as_pubkey(&self) -> Result<PublicKey, secp256k1::Error> {
85                 PublicKey::from_slice(&self.0)
86         }
87 }
88
89 impl fmt::Debug for NodeId {
90         fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
91                 write!(f, "NodeId({})", log_bytes!(self.0))
92         }
93 }
94 impl fmt::Display for NodeId {
95         fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
96                 write!(f, "{}", log_bytes!(self.0))
97         }
98 }
99
100 impl core::hash::Hash for NodeId {
101         fn hash<H: core::hash::Hasher>(&self, hasher: &mut H) {
102                 self.0.hash(hasher);
103         }
104 }
105
106 impl Eq for NodeId {}
107
108 impl PartialEq for NodeId {
109         fn eq(&self, other: &Self) -> bool {
110                 self.0[..] == other.0[..]
111         }
112 }
113
114 impl cmp::PartialOrd for NodeId {
115         fn partial_cmp(&self, other: &Self) -> Option<cmp::Ordering> {
116                 Some(self.cmp(other))
117         }
118 }
119
120 impl Ord for NodeId {
121         fn cmp(&self, other: &Self) -> cmp::Ordering {
122                 self.0[..].cmp(&other.0[..])
123         }
124 }
125
126 impl Writeable for NodeId {
127         fn write<W: Writer>(&self, writer: &mut W) -> Result<(), io::Error> {
128                 writer.write_all(&self.0)?;
129                 Ok(())
130         }
131 }
132
133 impl Readable for NodeId {
134         fn read<R: io::Read>(reader: &mut R) -> Result<Self, DecodeError> {
135                 let mut buf = [0; PUBLIC_KEY_SIZE];
136                 reader.read_exact(&mut buf)?;
137                 Ok(Self(buf))
138         }
139 }
140
141 impl From<PublicKey> for NodeId {
142         fn from(pubkey: PublicKey) -> Self {
143                 Self::from_pubkey(&pubkey)
144         }
145 }
146
147 impl TryFrom<NodeId> for PublicKey {
148         type Error = secp256k1::Error;
149
150         fn try_from(node_id: NodeId) -> Result<Self, Self::Error> {
151                 node_id.as_pubkey()
152         }
153 }
154
155 impl FromStr for NodeId {
156         type Err = bitcoin::hashes::hex::Error;
157
158         fn from_str(s: &str) -> Result<Self, Self::Err> {
159                 let data: [u8; PUBLIC_KEY_SIZE] = FromHex::from_hex(s)?;
160                 Ok(NodeId(data))
161         }
162 }
163
164 /// Represents the network as nodes and channels between them
165 pub struct NetworkGraph<L: Deref> where L::Target: Logger {
166         secp_ctx: Secp256k1<secp256k1::VerifyOnly>,
167         last_rapid_gossip_sync_timestamp: Mutex<Option<u32>>,
168         genesis_hash: BlockHash,
169         logger: L,
170         // Lock order: channels -> nodes
171         channels: RwLock<IndexedMap<u64, ChannelInfo>>,
172         nodes: RwLock<IndexedMap<NodeId, NodeInfo>>,
173         // Lock order: removed_channels -> removed_nodes
174         //
175         // NOTE: In the following `removed_*` maps, we use seconds since UNIX epoch to track time instead
176         // of `std::time::Instant`s for a few reasons:
177         //   * We want it to be possible to do tracking in no-std environments where we can compare
178         //     a provided current UNIX timestamp with the time at which we started tracking.
179         //   * In the future, if we decide to persist these maps, they will already be serializable.
180         //   * Although we lose out on the platform's monotonic clock, the system clock in a std
181         //     environment should be practical over the time period we are considering (on the order of a
182         //     week).
183         //
184         /// Keeps track of short channel IDs for channels we have explicitly removed due to permanent
185         /// failure so that we don't resync them from gossip. Each SCID is mapped to the time (in seconds)
186         /// it was removed so that once some time passes, we can potentially resync it from gossip again.
187         removed_channels: Mutex<HashMap<u64, Option<u64>>>,
188         /// Keeps track of `NodeId`s we have explicitly removed due to permanent failure so that we don't
189         /// resync them from gossip. Each `NodeId` is mapped to the time (in seconds) it was removed so
190         /// that once some time passes, we can potentially resync it from gossip again.
191         removed_nodes: Mutex<HashMap<NodeId, Option<u64>>>,
192         /// Announcement messages which are awaiting an on-chain lookup to be processed.
193         pub(super) pending_checks: utxo::PendingChecks,
194 }
195
196 /// A read-only view of [`NetworkGraph`].
197 pub struct ReadOnlyNetworkGraph<'a> {
198         channels: RwLockReadGuard<'a, IndexedMap<u64, ChannelInfo>>,
199         nodes: RwLockReadGuard<'a, IndexedMap<NodeId, NodeInfo>>,
200 }
201
202 /// Update to the [`NetworkGraph`] based on payment failure information conveyed via the Onion
203 /// return packet by a node along the route. See [BOLT #4] for details.
204 ///
205 /// [BOLT #4]: https://github.com/lightning/bolts/blob/master/04-onion-routing.md
206 #[derive(Clone, Debug, PartialEq, Eq)]
207 pub enum NetworkUpdate {
208         /// An error indicating a `channel_update` messages should be applied via
209         /// [`NetworkGraph::update_channel`].
210         ChannelUpdateMessage {
211                 /// The update to apply via [`NetworkGraph::update_channel`].
212                 msg: ChannelUpdate,
213         },
214         /// An error indicating that a channel failed to route a payment, which should be applied via
215         /// [`NetworkGraph::channel_failed_permanent`] if permanent.
216         ChannelFailure {
217                 /// The short channel id of the closed channel.
218                 short_channel_id: u64,
219                 /// Whether the channel should be permanently removed or temporarily disabled until a new
220                 /// `channel_update` message is received.
221                 is_permanent: bool,
222         },
223         /// An error indicating that a node failed to route a payment, which should be applied via
224         /// [`NetworkGraph::node_failed_permanent`] if permanent.
225         NodeFailure {
226                 /// The node id of the failed node.
227                 node_id: PublicKey,
228                 /// Whether the node should be permanently removed from consideration or can be restored
229                 /// when a new `channel_update` message is received.
230                 is_permanent: bool,
231         }
232 }
233
234 impl_writeable_tlv_based_enum_upgradable!(NetworkUpdate,
235         (0, ChannelUpdateMessage) => {
236                 (0, msg, required),
237         },
238         (2, ChannelFailure) => {
239                 (0, short_channel_id, required),
240                 (2, is_permanent, required),
241         },
242         (4, NodeFailure) => {
243                 (0, node_id, required),
244                 (2, is_permanent, required),
245         },
246 );
247
248 /// Receives and validates network updates from peers,
249 /// stores authentic and relevant data as a network graph.
250 /// This network graph is then used for routing payments.
251 /// Provides interface to help with initial routing sync by
252 /// serving historical announcements.
253 pub struct P2PGossipSync<G: Deref<Target=NetworkGraph<L>>, U: Deref, L: Deref>
254 where U::Target: UtxoLookup, L::Target: Logger
255 {
256         network_graph: G,
257         utxo_lookup: Option<U>,
258         #[cfg(feature = "std")]
259         full_syncs_requested: AtomicUsize,
260         pending_events: Mutex<Vec<MessageSendEvent>>,
261         logger: L,
262 }
263
264 impl<G: Deref<Target=NetworkGraph<L>>, U: Deref, L: Deref> P2PGossipSync<G, U, L>
265 where U::Target: UtxoLookup, L::Target: Logger
266 {
267         /// Creates a new tracker of the actual state of the network of channels and nodes,
268         /// assuming an existing [`NetworkGraph`].
269         /// UTXO lookup is used to make sure announced channels exist on-chain, channel data is
270         /// correct, and the announcement is signed with channel owners' keys.
271         pub fn new(network_graph: G, utxo_lookup: Option<U>, logger: L) -> Self {
272                 P2PGossipSync {
273                         network_graph,
274                         #[cfg(feature = "std")]
275                         full_syncs_requested: AtomicUsize::new(0),
276                         utxo_lookup,
277                         pending_events: Mutex::new(vec![]),
278                         logger,
279                 }
280         }
281
282         /// Adds a provider used to check new announcements. Does not affect
283         /// existing announcements unless they are updated.
284         /// Add, update or remove the provider would replace the current one.
285         pub fn add_utxo_lookup(&mut self, utxo_lookup: Option<U>) {
286                 self.utxo_lookup = utxo_lookup;
287         }
288
289         /// Gets a reference to the underlying [`NetworkGraph`] which was provided in
290         /// [`P2PGossipSync::new`].
291         ///
292         /// This is not exported to bindings users as bindings don't support a reference-to-a-reference yet
293         pub fn network_graph(&self) -> &G {
294                 &self.network_graph
295         }
296
297         #[cfg(feature = "std")]
298         /// Returns true when a full routing table sync should be performed with a peer.
299         fn should_request_full_sync(&self, _node_id: &PublicKey) -> bool {
300                 //TODO: Determine whether to request a full sync based on the network map.
301                 const FULL_SYNCS_TO_REQUEST: usize = 5;
302                 if self.full_syncs_requested.load(Ordering::Acquire) < FULL_SYNCS_TO_REQUEST {
303                         self.full_syncs_requested.fetch_add(1, Ordering::AcqRel);
304                         true
305                 } else {
306                         false
307                 }
308         }
309
310         /// Used to broadcast forward gossip messages which were validated async.
311         ///
312         /// Note that this will ignore events other than `Broadcast*` or messages with too much excess
313         /// data.
314         pub(super) fn forward_gossip_msg(&self, mut ev: MessageSendEvent) {
315                 match &mut ev {
316                         MessageSendEvent::BroadcastChannelAnnouncement { msg, ref mut update_msg } => {
317                                 if msg.contents.excess_data.len() > MAX_EXCESS_BYTES_FOR_RELAY { return; }
318                                 if update_msg.as_ref()
319                                         .map(|msg| msg.contents.excess_data.len()).unwrap_or(0) > MAX_EXCESS_BYTES_FOR_RELAY
320                                 {
321                                         *update_msg = None;
322                                 }
323                         },
324                         MessageSendEvent::BroadcastChannelUpdate { msg } => {
325                                 if msg.contents.excess_data.len() > MAX_EXCESS_BYTES_FOR_RELAY { return; }
326                         },
327                         MessageSendEvent::BroadcastNodeAnnouncement { msg } => {
328                                 if msg.contents.excess_data.len() >  MAX_EXCESS_BYTES_FOR_RELAY ||
329                                    msg.contents.excess_address_data.len() > MAX_EXCESS_BYTES_FOR_RELAY ||
330                                    msg.contents.excess_data.len() + msg.contents.excess_address_data.len() > MAX_EXCESS_BYTES_FOR_RELAY
331                                 {
332                                         return;
333                                 }
334                         },
335                         _ => return,
336                 }
337                 self.pending_events.lock().unwrap().push(ev);
338         }
339 }
340
341 impl<L: Deref> NetworkGraph<L> where L::Target: Logger {
342         /// Handles any network updates originating from [`Event`]s.
343         ///
344         /// [`Event`]: crate::events::Event
345         pub fn handle_network_update(&self, network_update: &NetworkUpdate) {
346                 match *network_update {
347                         NetworkUpdate::ChannelUpdateMessage { ref msg } => {
348                                 let short_channel_id = msg.contents.short_channel_id;
349                                 let is_enabled = msg.contents.flags & (1 << 1) != (1 << 1);
350                                 let status = if is_enabled { "enabled" } else { "disabled" };
351                                 log_debug!(self.logger, "Updating channel with channel_update from a payment failure. Channel {} is {}.", short_channel_id, status);
352                                 let _ = self.update_channel(msg);
353                         },
354                         NetworkUpdate::ChannelFailure { short_channel_id, is_permanent } => {
355                                 if is_permanent {
356                                         log_debug!(self.logger, "Removing channel graph entry for {} due to a payment failure.", short_channel_id);
357                                         self.channel_failed_permanent(short_channel_id);
358                                 }
359                         },
360                         NetworkUpdate::NodeFailure { ref node_id, is_permanent } => {
361                                 if is_permanent {
362                                         log_debug!(self.logger,
363                                                 "Removed node graph entry for {} due to a payment failure.", log_pubkey!(node_id));
364                                         self.node_failed_permanent(node_id);
365                                 };
366                         },
367                 }
368         }
369
370         /// Gets the genesis hash for this network graph.
371         pub fn get_genesis_hash(&self) -> BlockHash {
372                 self.genesis_hash
373         }
374 }
375
376 macro_rules! secp_verify_sig {
377         ( $secp_ctx: expr, $msg: expr, $sig: expr, $pubkey: expr, $msg_type: expr ) => {
378                 match $secp_ctx.verify_ecdsa($msg, $sig, $pubkey) {
379                         Ok(_) => {},
380                         Err(_) => {
381                                 return Err(LightningError {
382                                         err: format!("Invalid signature on {} message", $msg_type),
383                                         action: ErrorAction::SendWarningMessage {
384                                                 msg: msgs::WarningMessage {
385                                                         channel_id: [0; 32],
386                                                         data: format!("Invalid signature on {} message", $msg_type),
387                                                 },
388                                                 log_level: Level::Trace,
389                                         },
390                                 });
391                         },
392                 }
393         };
394 }
395
396 macro_rules! get_pubkey_from_node_id {
397         ( $node_id: expr, $msg_type: expr ) => {
398                 PublicKey::from_slice($node_id.as_slice())
399                         .map_err(|_| LightningError {
400                                 err: format!("Invalid public key on {} message", $msg_type),
401                                 action: ErrorAction::SendWarningMessage {
402                                         msg: msgs::WarningMessage {
403                                                 channel_id: [0; 32],
404                                                 data: format!("Invalid public key on {} message", $msg_type),
405                                         },
406                                         log_level: Level::Trace
407                                 }
408                         })?
409         }
410 }
411
412 impl<G: Deref<Target=NetworkGraph<L>>, U: Deref, L: Deref> RoutingMessageHandler for P2PGossipSync<G, U, L>
413 where U::Target: UtxoLookup, L::Target: Logger
414 {
415         fn handle_node_announcement(&self, msg: &msgs::NodeAnnouncement) -> Result<bool, LightningError> {
416                 self.network_graph.update_node_from_announcement(msg)?;
417                 Ok(msg.contents.excess_data.len() <=  MAX_EXCESS_BYTES_FOR_RELAY &&
418                    msg.contents.excess_address_data.len() <= MAX_EXCESS_BYTES_FOR_RELAY &&
419                    msg.contents.excess_data.len() + msg.contents.excess_address_data.len() <= MAX_EXCESS_BYTES_FOR_RELAY)
420         }
421
422         fn handle_channel_announcement(&self, msg: &msgs::ChannelAnnouncement) -> Result<bool, LightningError> {
423                 self.network_graph.update_channel_from_announcement(msg, &self.utxo_lookup)?;
424                 Ok(msg.contents.excess_data.len() <= MAX_EXCESS_BYTES_FOR_RELAY)
425         }
426
427         fn handle_channel_update(&self, msg: &msgs::ChannelUpdate) -> Result<bool, LightningError> {
428                 self.network_graph.update_channel(msg)?;
429                 Ok(msg.contents.excess_data.len() <= MAX_EXCESS_BYTES_FOR_RELAY)
430         }
431
432         fn get_next_channel_announcement(&self, starting_point: u64) -> Option<(ChannelAnnouncement, Option<ChannelUpdate>, Option<ChannelUpdate>)> {
433                 let mut channels = self.network_graph.channels.write().unwrap();
434                 for (_, ref chan) in channels.range(starting_point..) {
435                         if chan.announcement_message.is_some() {
436                                 let chan_announcement = chan.announcement_message.clone().unwrap();
437                                 let mut one_to_two_announcement: Option<msgs::ChannelUpdate> = None;
438                                 let mut two_to_one_announcement: Option<msgs::ChannelUpdate> = None;
439                                 if let Some(one_to_two) = chan.one_to_two.as_ref() {
440                                         one_to_two_announcement = one_to_two.last_update_message.clone();
441                                 }
442                                 if let Some(two_to_one) = chan.two_to_one.as_ref() {
443                                         two_to_one_announcement = two_to_one.last_update_message.clone();
444                                 }
445                                 return Some((chan_announcement, one_to_two_announcement, two_to_one_announcement));
446                         } else {
447                                 // TODO: We may end up sending un-announced channel_updates if we are sending
448                                 // initial sync data while receiving announce/updates for this channel.
449                         }
450                 }
451                 None
452         }
453
454         fn get_next_node_announcement(&self, starting_point: Option<&NodeId>) -> Option<NodeAnnouncement> {
455                 let mut nodes = self.network_graph.nodes.write().unwrap();
456                 let iter = if let Some(node_id) = starting_point {
457                                 nodes.range((Bound::Excluded(node_id), Bound::Unbounded))
458                         } else {
459                                 nodes.range(..)
460                         };
461                 for (_, ref node) in iter {
462                         if let Some(node_info) = node.announcement_info.as_ref() {
463                                 if let Some(msg) = node_info.announcement_message.clone() {
464                                         return Some(msg);
465                                 }
466                         }
467                 }
468                 None
469         }
470
471         /// Initiates a stateless sync of routing gossip information with a peer
472         /// using [`gossip_queries`]. The default strategy used by this implementation
473         /// is to sync the full block range with several peers.
474         ///
475         /// We should expect one or more [`reply_channel_range`] messages in response
476         /// to our [`query_channel_range`]. Each reply will enqueue a [`query_scid`] message
477         /// to request gossip messages for each channel. The sync is considered complete
478         /// when the final [`reply_scids_end`] message is received, though we are not
479         /// tracking this directly.
480         ///
481         /// [`gossip_queries`]: https://github.com/lightning/bolts/blob/master/07-routing-gossip.md#query-messages
482         /// [`reply_channel_range`]: msgs::ReplyChannelRange
483         /// [`query_channel_range`]: msgs::QueryChannelRange
484         /// [`query_scid`]: msgs::QueryShortChannelIds
485         /// [`reply_scids_end`]: msgs::ReplyShortChannelIdsEnd
486         fn peer_connected(&self, their_node_id: &PublicKey, init_msg: &Init, _inbound: bool) -> Result<(), ()> {
487                 // We will only perform a sync with peers that support gossip_queries.
488                 if !init_msg.features.supports_gossip_queries() {
489                         // Don't disconnect peers for not supporting gossip queries. We may wish to have
490                         // channels with peers even without being able to exchange gossip.
491                         return Ok(());
492                 }
493
494                 // The lightning network's gossip sync system is completely broken in numerous ways.
495                 //
496                 // Given no broadly-available set-reconciliation protocol, the only reasonable approach is
497                 // to do a full sync from the first few peers we connect to, and then receive gossip
498                 // updates from all our peers normally.
499                 //
500                 // Originally, we could simply tell a peer to dump us the entire gossip table on startup,
501                 // wasting lots of bandwidth but ensuring we have the full network graph. After the initial
502                 // dump peers would always send gossip and we'd stay up-to-date with whatever our peer has
503                 // seen.
504                 //
505                 // In order to reduce the bandwidth waste, "gossip queries" were introduced, allowing you
506                 // to ask for the SCIDs of all channels in your peer's routing graph, and then only request
507                 // channel data which you are missing. Except there was no way at all to identify which
508                 // `channel_update`s you were missing, so you still had to request everything, just in a
509                 // very complicated way with some queries instead of just getting the dump.
510                 //
511                 // Later, an option was added to fetch the latest timestamps of the `channel_update`s to
512                 // make efficient sync possible, however it has yet to be implemented in lnd, which makes
513                 // relying on it useless.
514                 //
515                 // After gossip queries were introduced, support for receiving a full gossip table dump on
516                 // connection was removed from several nodes, making it impossible to get a full sync
517                 // without using the "gossip queries" messages.
518                 //
519                 // Once you opt into "gossip queries" the only way to receive any gossip updates that a
520                 // peer receives after you connect, you must send a `gossip_timestamp_filter` message. This
521                 // message, as the name implies, tells the peer to not forward any gossip messages with a
522                 // timestamp older than a given value (not the time the peer received the filter, but the
523                 // timestamp in the update message, which is often hours behind when the peer received the
524                 // message).
525                 //
526                 // Obnoxiously, `gossip_timestamp_filter` isn't *just* a filter, but its also a request for
527                 // your peer to send you the full routing graph (subject to the filter). Thus, in order to
528                 // tell a peer to send you any updates as it sees them, you have to also ask for the full
529                 // routing graph to be synced. If you set a timestamp filter near the current time, peers
530                 // will simply not forward any new updates they see to you which were generated some time
531                 // ago (which is not uncommon). If you instead set a timestamp filter near 0 (or two weeks
532                 // ago), you will always get the full routing graph from all your peers.
533                 //
534                 // Most lightning nodes today opt to simply turn off receiving gossip data which only
535                 // propagated some time after it was generated, and, worse, often disable gossiping with
536                 // several peers after their first connection. The second behavior can cause gossip to not
537                 // propagate fully if there are cuts in the gossiping subgraph.
538                 //
539                 // In an attempt to cut a middle ground between always fetching the full graph from all of
540                 // our peers and never receiving gossip from peers at all, we send all of our peers a
541                 // `gossip_timestamp_filter`, with the filter time set either two weeks ago or an hour ago.
542                 //
543                 // For no-std builds, we bury our head in the sand and do a full sync on each connection.
544                 #[allow(unused_mut, unused_assignments)]
545                 let mut gossip_start_time = 0;
546                 #[cfg(feature = "std")]
547                 {
548                         gossip_start_time = SystemTime::now().duration_since(UNIX_EPOCH).expect("Time must be > 1970").as_secs();
549                         if self.should_request_full_sync(&their_node_id) {
550                                 gossip_start_time -= 60 * 60 * 24 * 7 * 2; // 2 weeks ago
551                         } else {
552                                 gossip_start_time -= 60 * 60; // an hour ago
553                         }
554                 }
555
556                 let mut pending_events = self.pending_events.lock().unwrap();
557                 pending_events.push(MessageSendEvent::SendGossipTimestampFilter {
558                         node_id: their_node_id.clone(),
559                         msg: GossipTimestampFilter {
560                                 chain_hash: self.network_graph.genesis_hash,
561                                 first_timestamp: gossip_start_time as u32, // 2106 issue!
562                                 timestamp_range: u32::max_value(),
563                         },
564                 });
565                 Ok(())
566         }
567
568         fn handle_reply_channel_range(&self, _their_node_id: &PublicKey, _msg: ReplyChannelRange) -> Result<(), LightningError> {
569                 // We don't make queries, so should never receive replies. If, in the future, the set
570                 // reconciliation extensions to gossip queries become broadly supported, we should revert
571                 // this code to its state pre-0.0.106.
572                 Ok(())
573         }
574
575         fn handle_reply_short_channel_ids_end(&self, _their_node_id: &PublicKey, _msg: ReplyShortChannelIdsEnd) -> Result<(), LightningError> {
576                 // We don't make queries, so should never receive replies. If, in the future, the set
577                 // reconciliation extensions to gossip queries become broadly supported, we should revert
578                 // this code to its state pre-0.0.106.
579                 Ok(())
580         }
581
582         /// Processes a query from a peer by finding announced/public channels whose funding UTXOs
583         /// are in the specified block range. Due to message size limits, large range
584         /// queries may result in several reply messages. This implementation enqueues
585         /// all reply messages into pending events. Each message will allocate just under 65KiB. A full
586         /// sync of the public routing table with 128k channels will generated 16 messages and allocate ~1MB.
587         /// Logic can be changed to reduce allocation if/when a full sync of the routing table impacts
588         /// memory constrained systems.
589         fn handle_query_channel_range(&self, their_node_id: &PublicKey, msg: QueryChannelRange) -> Result<(), LightningError> {
590                 log_debug!(self.logger, "Handling query_channel_range peer={}, first_blocknum={}, number_of_blocks={}", log_pubkey!(their_node_id), msg.first_blocknum, msg.number_of_blocks);
591
592                 let inclusive_start_scid = scid_from_parts(msg.first_blocknum as u64, 0, 0);
593
594                 // We might receive valid queries with end_blocknum that would overflow SCID conversion.
595                 // If so, we manually cap the ending block to avoid this overflow.
596                 let exclusive_end_scid = scid_from_parts(cmp::min(msg.end_blocknum() as u64, MAX_SCID_BLOCK), 0, 0);
597
598                 // Per spec, we must reply to a query. Send an empty message when things are invalid.
599                 if msg.chain_hash != self.network_graph.genesis_hash || inclusive_start_scid.is_err() || exclusive_end_scid.is_err() || msg.number_of_blocks == 0 {
600                         let mut pending_events = self.pending_events.lock().unwrap();
601                         pending_events.push(MessageSendEvent::SendReplyChannelRange {
602                                 node_id: their_node_id.clone(),
603                                 msg: ReplyChannelRange {
604                                         chain_hash: msg.chain_hash.clone(),
605                                         first_blocknum: msg.first_blocknum,
606                                         number_of_blocks: msg.number_of_blocks,
607                                         sync_complete: true,
608                                         short_channel_ids: vec![],
609                                 }
610                         });
611                         return Err(LightningError {
612                                 err: String::from("query_channel_range could not be processed"),
613                                 action: ErrorAction::IgnoreError,
614                         });
615                 }
616
617                 // Creates channel batches. We are not checking if the channel is routable
618                 // (has at least one update). A peer may still want to know the channel
619                 // exists even if its not yet routable.
620                 let mut batches: Vec<Vec<u64>> = vec![Vec::with_capacity(MAX_SCIDS_PER_REPLY)];
621                 let mut channels = self.network_graph.channels.write().unwrap();
622                 for (_, ref chan) in channels.range(inclusive_start_scid.unwrap()..exclusive_end_scid.unwrap()) {
623                         if let Some(chan_announcement) = &chan.announcement_message {
624                                 // Construct a new batch if last one is full
625                                 if batches.last().unwrap().len() == batches.last().unwrap().capacity() {
626                                         batches.push(Vec::with_capacity(MAX_SCIDS_PER_REPLY));
627                                 }
628
629                                 let batch = batches.last_mut().unwrap();
630                                 batch.push(chan_announcement.contents.short_channel_id);
631                         }
632                 }
633                 drop(channels);
634
635                 let mut pending_events = self.pending_events.lock().unwrap();
636                 let batch_count = batches.len();
637                 let mut prev_batch_endblock = msg.first_blocknum;
638                 for (batch_index, batch) in batches.into_iter().enumerate() {
639                         // Per spec, the initial `first_blocknum` needs to be <= the query's `first_blocknum`
640                         // and subsequent `first_blocknum`s must be >= the prior reply's `first_blocknum`.
641                         //
642                         // Additionally, c-lightning versions < 0.10 require that the `first_blocknum` of each
643                         // reply is >= the previous reply's `first_blocknum` and either exactly the previous
644                         // reply's `first_blocknum + number_of_blocks` or exactly one greater. This is a
645                         // significant diversion from the requirements set by the spec, and, in case of blocks
646                         // with no channel opens (e.g. empty blocks), requires that we use the previous value
647                         // and *not* derive the first_blocknum from the actual first block of the reply.
648                         let first_blocknum = prev_batch_endblock;
649
650                         // Each message carries the number of blocks (from the `first_blocknum`) its contents
651                         // fit in. Though there is no requirement that we use exactly the number of blocks its
652                         // contents are from, except for the bogus requirements c-lightning enforces, above.
653                         //
654                         // Per spec, the last end block (ie `first_blocknum + number_of_blocks`) needs to be
655                         // >= the query's end block. Thus, for the last reply, we calculate the difference
656                         // between the query's end block and the start of the reply.
657                         //
658                         // Overflow safe since end_blocknum=msg.first_block_num+msg.number_of_blocks and
659                         // first_blocknum will be either msg.first_blocknum or a higher block height.
660                         let (sync_complete, number_of_blocks) = if batch_index == batch_count-1 {
661                                 (true, msg.end_blocknum() - first_blocknum)
662                         }
663                         // Prior replies should use the number of blocks that fit into the reply. Overflow
664                         // safe since first_blocknum is always <= last SCID's block.
665                         else {
666                                 (false, block_from_scid(batch.last().unwrap()) - first_blocknum)
667                         };
668
669                         prev_batch_endblock = first_blocknum + number_of_blocks;
670
671                         pending_events.push(MessageSendEvent::SendReplyChannelRange {
672                                 node_id: their_node_id.clone(),
673                                 msg: ReplyChannelRange {
674                                         chain_hash: msg.chain_hash.clone(),
675                                         first_blocknum,
676                                         number_of_blocks,
677                                         sync_complete,
678                                         short_channel_ids: batch,
679                                 }
680                         });
681                 }
682
683                 Ok(())
684         }
685
686         fn handle_query_short_channel_ids(&self, _their_node_id: &PublicKey, _msg: QueryShortChannelIds) -> Result<(), LightningError> {
687                 // TODO
688                 Err(LightningError {
689                         err: String::from("Not implemented"),
690                         action: ErrorAction::IgnoreError,
691                 })
692         }
693
694         fn provided_node_features(&self) -> NodeFeatures {
695                 let mut features = NodeFeatures::empty();
696                 features.set_gossip_queries_optional();
697                 features
698         }
699
700         fn provided_init_features(&self, _their_node_id: &PublicKey) -> InitFeatures {
701                 let mut features = InitFeatures::empty();
702                 features.set_gossip_queries_optional();
703                 features
704         }
705
706         fn processing_queue_high(&self) -> bool {
707                 self.network_graph.pending_checks.too_many_checks_pending()
708         }
709 }
710
711 impl<G: Deref<Target=NetworkGraph<L>>, U: Deref, L: Deref> MessageSendEventsProvider for P2PGossipSync<G, U, L>
712 where
713         U::Target: UtxoLookup,
714         L::Target: Logger,
715 {
716         fn get_and_clear_pending_msg_events(&self) -> Vec<MessageSendEvent> {
717                 let mut ret = Vec::new();
718                 let mut pending_events = self.pending_events.lock().unwrap();
719                 core::mem::swap(&mut ret, &mut pending_events);
720                 ret
721         }
722 }
723
724 #[derive(Clone, Debug, PartialEq, Eq)]
725 /// Details about one direction of a channel as received within a [`ChannelUpdate`].
726 pub struct ChannelUpdateInfo {
727         /// When the last update to the channel direction was issued.
728         /// Value is opaque, as set in the announcement.
729         pub last_update: u32,
730         /// Whether the channel can be currently used for payments (in this one direction).
731         pub enabled: bool,
732         /// The difference in CLTV values that you must have when routing through this channel.
733         pub cltv_expiry_delta: u16,
734         /// The minimum value, which must be relayed to the next hop via the channel
735         pub htlc_minimum_msat: u64,
736         /// The maximum value which may be relayed to the next hop via the channel.
737         pub htlc_maximum_msat: u64,
738         /// Fees charged when the channel is used for routing
739         pub fees: RoutingFees,
740         /// Most recent update for the channel received from the network
741         /// Mostly redundant with the data we store in fields explicitly.
742         /// Everything else is useful only for sending out for initial routing sync.
743         /// Not stored if contains excess data to prevent DoS.
744         pub last_update_message: Option<ChannelUpdate>,
745 }
746
747 impl fmt::Display for ChannelUpdateInfo {
748         fn fmt(&self, f: &mut fmt::Formatter) -> Result<(), fmt::Error> {
749                 write!(f, "last_update {}, enabled {}, cltv_expiry_delta {}, htlc_minimum_msat {}, fees {:?}", self.last_update, self.enabled, self.cltv_expiry_delta, self.htlc_minimum_msat, self.fees)?;
750                 Ok(())
751         }
752 }
753
754 impl Writeable for ChannelUpdateInfo {
755         fn write<W: crate::util::ser::Writer>(&self, writer: &mut W) -> Result<(), io::Error> {
756                 write_tlv_fields!(writer, {
757                         (0, self.last_update, required),
758                         (2, self.enabled, required),
759                         (4, self.cltv_expiry_delta, required),
760                         (6, self.htlc_minimum_msat, required),
761                         // Writing htlc_maximum_msat as an Option<u64> is required to maintain backwards
762                         // compatibility with LDK versions prior to v0.0.110.
763                         (8, Some(self.htlc_maximum_msat), required),
764                         (10, self.fees, required),
765                         (12, self.last_update_message, required),
766                 });
767                 Ok(())
768         }
769 }
770
771 impl Readable for ChannelUpdateInfo {
772         fn read<R: io::Read>(reader: &mut R) -> Result<Self, DecodeError> {
773                 _init_tlv_field_var!(last_update, required);
774                 _init_tlv_field_var!(enabled, required);
775                 _init_tlv_field_var!(cltv_expiry_delta, required);
776                 _init_tlv_field_var!(htlc_minimum_msat, required);
777                 _init_tlv_field_var!(htlc_maximum_msat, option);
778                 _init_tlv_field_var!(fees, required);
779                 _init_tlv_field_var!(last_update_message, required);
780
781                 read_tlv_fields!(reader, {
782                         (0, last_update, required),
783                         (2, enabled, required),
784                         (4, cltv_expiry_delta, required),
785                         (6, htlc_minimum_msat, required),
786                         (8, htlc_maximum_msat, required),
787                         (10, fees, required),
788                         (12, last_update_message, required)
789                 });
790
791                 if let Some(htlc_maximum_msat) = htlc_maximum_msat {
792                         Ok(ChannelUpdateInfo {
793                                 last_update: _init_tlv_based_struct_field!(last_update, required),
794                                 enabled: _init_tlv_based_struct_field!(enabled, required),
795                                 cltv_expiry_delta: _init_tlv_based_struct_field!(cltv_expiry_delta, required),
796                                 htlc_minimum_msat: _init_tlv_based_struct_field!(htlc_minimum_msat, required),
797                                 htlc_maximum_msat,
798                                 fees: _init_tlv_based_struct_field!(fees, required),
799                                 last_update_message: _init_tlv_based_struct_field!(last_update_message, required),
800                         })
801                 } else {
802                         Err(DecodeError::InvalidValue)
803                 }
804         }
805 }
806
807 #[derive(Clone, Debug, PartialEq, Eq)]
808 /// Details about a channel (both directions).
809 /// Received within a channel announcement.
810 pub struct ChannelInfo {
811         /// Protocol features of a channel communicated during its announcement
812         pub features: ChannelFeatures,
813         /// Source node of the first direction of a channel
814         pub node_one: NodeId,
815         /// Details about the first direction of a channel
816         pub one_to_two: Option<ChannelUpdateInfo>,
817         /// Source node of the second direction of a channel
818         pub node_two: NodeId,
819         /// Details about the second direction of a channel
820         pub two_to_one: Option<ChannelUpdateInfo>,
821         /// The channel capacity as seen on-chain, if chain lookup is available.
822         pub capacity_sats: Option<u64>,
823         /// An initial announcement of the channel
824         /// Mostly redundant with the data we store in fields explicitly.
825         /// Everything else is useful only for sending out for initial routing sync.
826         /// Not stored if contains excess data to prevent DoS.
827         pub announcement_message: Option<ChannelAnnouncement>,
828         /// The timestamp when we received the announcement, if we are running with feature = "std"
829         /// (which we can probably assume we are - no-std environments probably won't have a full
830         /// network graph in memory!).
831         announcement_received_time: u64,
832 }
833
834 impl ChannelInfo {
835         /// Returns a [`DirectedChannelInfo`] for the channel directed to the given `target` from a
836         /// returned `source`, or `None` if `target` is not one of the channel's counterparties.
837         pub fn as_directed_to(&self, target: &NodeId) -> Option<(DirectedChannelInfo, &NodeId)> {
838                 let (direction, source) = {
839                         if target == &self.node_one {
840                                 (self.two_to_one.as_ref(), &self.node_two)
841                         } else if target == &self.node_two {
842                                 (self.one_to_two.as_ref(), &self.node_one)
843                         } else {
844                                 return None;
845                         }
846                 };
847                 direction.map(|dir| (DirectedChannelInfo::new(self, dir), source))
848         }
849
850         /// Returns a [`DirectedChannelInfo`] for the channel directed from the given `source` to a
851         /// returned `target`, or `None` if `source` is not one of the channel's counterparties.
852         pub fn as_directed_from(&self, source: &NodeId) -> Option<(DirectedChannelInfo, &NodeId)> {
853                 let (direction, target) = {
854                         if source == &self.node_one {
855                                 (self.one_to_two.as_ref(), &self.node_two)
856                         } else if source == &self.node_two {
857                                 (self.two_to_one.as_ref(), &self.node_one)
858                         } else {
859                                 return None;
860                         }
861                 };
862                 direction.map(|dir| (DirectedChannelInfo::new(self, dir), target))
863         }
864
865         /// Returns a [`ChannelUpdateInfo`] based on the direction implied by the channel_flag.
866         pub fn get_directional_info(&self, channel_flags: u8) -> Option<&ChannelUpdateInfo> {
867                 let direction = channel_flags & 1u8;
868                 if direction == 0 {
869                         self.one_to_two.as_ref()
870                 } else {
871                         self.two_to_one.as_ref()
872                 }
873         }
874 }
875
876 impl fmt::Display for ChannelInfo {
877         fn fmt(&self, f: &mut fmt::Formatter) -> Result<(), fmt::Error> {
878                 write!(f, "features: {}, node_one: {}, one_to_two: {:?}, node_two: {}, two_to_one: {:?}",
879                    log_bytes!(self.features.encode()), log_bytes!(self.node_one.as_slice()), self.one_to_two, log_bytes!(self.node_two.as_slice()), self.two_to_one)?;
880                 Ok(())
881         }
882 }
883
884 impl Writeable for ChannelInfo {
885         fn write<W: crate::util::ser::Writer>(&self, writer: &mut W) -> Result<(), io::Error> {
886                 write_tlv_fields!(writer, {
887                         (0, self.features, required),
888                         (1, self.announcement_received_time, (default_value, 0)),
889                         (2, self.node_one, required),
890                         (4, self.one_to_two, required),
891                         (6, self.node_two, required),
892                         (8, self.two_to_one, required),
893                         (10, self.capacity_sats, required),
894                         (12, self.announcement_message, required),
895                 });
896                 Ok(())
897         }
898 }
899
900 // A wrapper allowing for the optional deseralization of ChannelUpdateInfo. Utilizing this is
901 // necessary to maintain backwards compatibility with previous serializations of `ChannelUpdateInfo`
902 // that may have no `htlc_maximum_msat` field set. In case the field is absent, we simply ignore
903 // the error and continue reading the `ChannelInfo`. Hopefully, we'll then eventually receive newer
904 // channel updates via the gossip network.
905 struct ChannelUpdateInfoDeserWrapper(Option<ChannelUpdateInfo>);
906
907 impl MaybeReadable for ChannelUpdateInfoDeserWrapper {
908         fn read<R: io::Read>(reader: &mut R) -> Result<Option<Self>, DecodeError> {
909                 match crate::util::ser::Readable::read(reader) {
910                         Ok(channel_update_option) => Ok(Some(Self(channel_update_option))),
911                         Err(DecodeError::ShortRead) => Ok(None),
912                         Err(DecodeError::InvalidValue) => Ok(None),
913                         Err(err) => Err(err),
914                 }
915         }
916 }
917
918 impl Readable for ChannelInfo {
919         fn read<R: io::Read>(reader: &mut R) -> Result<Self, DecodeError> {
920                 _init_tlv_field_var!(features, required);
921                 _init_tlv_field_var!(announcement_received_time, (default_value, 0));
922                 _init_tlv_field_var!(node_one, required);
923                 let mut one_to_two_wrap: Option<ChannelUpdateInfoDeserWrapper> = None;
924                 _init_tlv_field_var!(node_two, required);
925                 let mut two_to_one_wrap: Option<ChannelUpdateInfoDeserWrapper> = None;
926                 _init_tlv_field_var!(capacity_sats, required);
927                 _init_tlv_field_var!(announcement_message, required);
928                 read_tlv_fields!(reader, {
929                         (0, features, required),
930                         (1, announcement_received_time, (default_value, 0)),
931                         (2, node_one, required),
932                         (4, one_to_two_wrap, upgradable_option),
933                         (6, node_two, required),
934                         (8, two_to_one_wrap, upgradable_option),
935                         (10, capacity_sats, required),
936                         (12, announcement_message, required),
937                 });
938
939                 Ok(ChannelInfo {
940                         features: _init_tlv_based_struct_field!(features, required),
941                         node_one: _init_tlv_based_struct_field!(node_one, required),
942                         one_to_two: one_to_two_wrap.map(|w| w.0).unwrap_or(None),
943                         node_two: _init_tlv_based_struct_field!(node_two, required),
944                         two_to_one: two_to_one_wrap.map(|w| w.0).unwrap_or(None),
945                         capacity_sats: _init_tlv_based_struct_field!(capacity_sats, required),
946                         announcement_message: _init_tlv_based_struct_field!(announcement_message, required),
947                         announcement_received_time: _init_tlv_based_struct_field!(announcement_received_time, (default_value, 0)),
948                 })
949         }
950 }
951
952 /// A wrapper around [`ChannelInfo`] representing information about the channel as directed from a
953 /// source node to a target node.
954 #[derive(Clone)]
955 pub struct DirectedChannelInfo<'a> {
956         channel: &'a ChannelInfo,
957         direction: &'a ChannelUpdateInfo,
958         htlc_maximum_msat: u64,
959         effective_capacity: EffectiveCapacity,
960 }
961
962 impl<'a> DirectedChannelInfo<'a> {
963         #[inline]
964         fn new(channel: &'a ChannelInfo, direction: &'a ChannelUpdateInfo) -> Self {
965                 let mut htlc_maximum_msat = direction.htlc_maximum_msat;
966                 let capacity_msat = channel.capacity_sats.map(|capacity_sats| capacity_sats * 1000);
967
968                 let effective_capacity = match capacity_msat {
969                         Some(capacity_msat) => {
970                                 htlc_maximum_msat = cmp::min(htlc_maximum_msat, capacity_msat);
971                                 EffectiveCapacity::Total { capacity_msat, htlc_maximum_msat: htlc_maximum_msat }
972                         },
973                         None => EffectiveCapacity::AdvertisedMaxHTLC { amount_msat: htlc_maximum_msat },
974                 };
975
976                 Self {
977                         channel, direction, htlc_maximum_msat, effective_capacity
978                 }
979         }
980
981         /// Returns information for the channel.
982         #[inline]
983         pub fn channel(&self) -> &'a ChannelInfo { self.channel }
984
985         /// Returns the maximum HTLC amount allowed over the channel in the direction.
986         #[inline]
987         pub fn htlc_maximum_msat(&self) -> u64 {
988                 self.htlc_maximum_msat
989         }
990
991         /// Returns the [`EffectiveCapacity`] of the channel in the direction.
992         ///
993         /// This is either the total capacity from the funding transaction, if known, or the
994         /// `htlc_maximum_msat` for the direction as advertised by the gossip network, if known,
995         /// otherwise.
996         pub fn effective_capacity(&self) -> EffectiveCapacity {
997                 self.effective_capacity
998         }
999
1000         /// Returns information for the direction.
1001         #[inline]
1002         pub(super) fn direction(&self) -> &'a ChannelUpdateInfo { self.direction }
1003 }
1004
1005 impl<'a> fmt::Debug for DirectedChannelInfo<'a> {
1006         fn fmt(&self, f: &mut fmt::Formatter) -> Result<(), fmt::Error> {
1007                 f.debug_struct("DirectedChannelInfo")
1008                         .field("channel", &self.channel)
1009                         .finish()
1010         }
1011 }
1012
1013 /// The effective capacity of a channel for routing purposes.
1014 ///
1015 /// While this may be smaller than the actual channel capacity, amounts greater than
1016 /// [`Self::as_msat`] should not be routed through the channel.
1017 #[derive(Clone, Copy, Debug, PartialEq)]
1018 pub enum EffectiveCapacity {
1019         /// The available liquidity in the channel known from being a channel counterparty, and thus a
1020         /// direct hop.
1021         ExactLiquidity {
1022                 /// Either the inbound or outbound liquidity depending on the direction, denominated in
1023                 /// millisatoshi.
1024                 liquidity_msat: u64,
1025         },
1026         /// The maximum HTLC amount in one direction as advertised on the gossip network.
1027         AdvertisedMaxHTLC {
1028                 /// The maximum HTLC amount denominated in millisatoshi.
1029                 amount_msat: u64,
1030         },
1031         /// The total capacity of the channel as determined by the funding transaction.
1032         Total {
1033                 /// The funding amount denominated in millisatoshi.
1034                 capacity_msat: u64,
1035                 /// The maximum HTLC amount denominated in millisatoshi.
1036                 htlc_maximum_msat: u64
1037         },
1038         /// A capacity sufficient to route any payment, typically used for private channels provided by
1039         /// an invoice.
1040         Infinite,
1041         /// The maximum HTLC amount as provided by an invoice route hint.
1042         HintMaxHTLC {
1043                 /// The maximum HTLC amount denominated in millisatoshi.
1044                 amount_msat: u64,
1045         },
1046         /// A capacity that is unknown possibly because either the chain state is unavailable to know
1047         /// the total capacity or the `htlc_maximum_msat` was not advertised on the gossip network.
1048         Unknown,
1049 }
1050
1051 /// The presumed channel capacity denominated in millisatoshi for [`EffectiveCapacity::Unknown`] to
1052 /// use when making routing decisions.
1053 pub const UNKNOWN_CHANNEL_CAPACITY_MSAT: u64 = 250_000 * 1000;
1054
1055 impl EffectiveCapacity {
1056         /// Returns the effective capacity denominated in millisatoshi.
1057         pub fn as_msat(&self) -> u64 {
1058                 match self {
1059                         EffectiveCapacity::ExactLiquidity { liquidity_msat } => *liquidity_msat,
1060                         EffectiveCapacity::AdvertisedMaxHTLC { amount_msat } => *amount_msat,
1061                         EffectiveCapacity::Total { capacity_msat, .. } => *capacity_msat,
1062                         EffectiveCapacity::HintMaxHTLC { amount_msat } => *amount_msat,
1063                         EffectiveCapacity::Infinite => u64::max_value(),
1064                         EffectiveCapacity::Unknown => UNKNOWN_CHANNEL_CAPACITY_MSAT,
1065                 }
1066         }
1067 }
1068
1069 /// Fees for routing via a given channel or a node
1070 #[derive(Eq, PartialEq, Copy, Clone, Debug, Hash, Ord, PartialOrd)]
1071 pub struct RoutingFees {
1072         /// Flat routing fee in millisatoshis.
1073         pub base_msat: u32,
1074         /// Liquidity-based routing fee in millionths of a routed amount.
1075         /// In other words, 10000 is 1%.
1076         pub proportional_millionths: u32,
1077 }
1078
1079 impl_writeable_tlv_based!(RoutingFees, {
1080         (0, base_msat, required),
1081         (2, proportional_millionths, required)
1082 });
1083
1084 #[derive(Clone, Debug, PartialEq, Eq)]
1085 /// Information received in the latest node_announcement from this node.
1086 pub struct NodeAnnouncementInfo {
1087         /// Protocol features the node announced support for
1088         pub features: NodeFeatures,
1089         /// When the last known update to the node state was issued.
1090         /// Value is opaque, as set in the announcement.
1091         pub last_update: u32,
1092         /// Color assigned to the node
1093         pub rgb: [u8; 3],
1094         /// Moniker assigned to the node.
1095         /// May be invalid or malicious (eg control chars),
1096         /// should not be exposed to the user.
1097         pub alias: NodeAlias,
1098         /// An initial announcement of the node
1099         /// Mostly redundant with the data we store in fields explicitly.
1100         /// Everything else is useful only for sending out for initial routing sync.
1101         /// Not stored if contains excess data to prevent DoS.
1102         pub announcement_message: Option<NodeAnnouncement>
1103 }
1104
1105 impl NodeAnnouncementInfo {
1106         /// Internet-level addresses via which one can connect to the node
1107         pub fn addresses(&self) -> &[NetAddress] {
1108                 self.announcement_message.as_ref()
1109                         .map(|msg| msg.contents.addresses.as_slice())
1110                         .unwrap_or_default()
1111         }
1112 }
1113
1114 impl Writeable for NodeAnnouncementInfo {
1115         fn write<W: Writer>(&self, writer: &mut W) -> Result<(), io::Error> {
1116                 let empty_addresses = Vec::<NetAddress>::new();
1117                 write_tlv_fields!(writer, {
1118                         (0, self.features, required),
1119                         (2, self.last_update, required),
1120                         (4, self.rgb, required),
1121                         (6, self.alias, required),
1122                         (8, self.announcement_message, option),
1123                         (10, empty_addresses, vec_type), // Versions prior to 0.0.115 require this field
1124                 });
1125                 Ok(())
1126         }
1127 }
1128
1129 impl Readable for NodeAnnouncementInfo {
1130     fn read<R: io::Read>(reader: &mut R) -> Result<Self, DecodeError> {
1131                 _init_and_read_tlv_fields!(reader, {
1132                         (0, features, required),
1133                         (2, last_update, required),
1134                         (4, rgb, required),
1135                         (6, alias, required),
1136                         (8, announcement_message, option),
1137                         (10, _addresses, vec_type), // deprecated, not used anymore
1138                 });
1139                 let _: Option<Vec<NetAddress>> = _addresses;
1140                 Ok(Self { features: features.0.unwrap(), last_update: last_update.0.unwrap(), rgb: rgb.0.unwrap(),
1141                         alias: alias.0.unwrap(), announcement_message })
1142     }
1143 }
1144
1145 /// A user-defined name for a node, which may be used when displaying the node in a graph.
1146 ///
1147 /// Since node aliases are provided by third parties, they are a potential avenue for injection
1148 /// attacks. Care must be taken when processing.
1149 #[derive(Clone, Copy, Debug, PartialEq, Eq)]
1150 pub struct NodeAlias(pub [u8; 32]);
1151
1152 impl fmt::Display for NodeAlias {
1153         fn fmt(&self, f: &mut fmt::Formatter) -> Result<(), fmt::Error> {
1154                 let first_null = self.0.iter().position(|b| *b == 0).unwrap_or(self.0.len());
1155                 let bytes = self.0.split_at(first_null).0;
1156                 match core::str::from_utf8(bytes) {
1157                         Ok(alias) => PrintableString(alias).fmt(f)?,
1158                         Err(_) => {
1159                                 use core::fmt::Write;
1160                                 for c in bytes.iter().map(|b| *b as char) {
1161                                         // Display printable ASCII characters
1162                                         let control_symbol = core::char::REPLACEMENT_CHARACTER;
1163                                         let c = if c >= '\x20' && c <= '\x7e' { c } else { control_symbol };
1164                                         f.write_char(c)?;
1165                                 }
1166                         },
1167                 };
1168                 Ok(())
1169         }
1170 }
1171
1172 impl Writeable for NodeAlias {
1173         fn write<W: Writer>(&self, w: &mut W) -> Result<(), io::Error> {
1174                 self.0.write(w)
1175         }
1176 }
1177
1178 impl Readable for NodeAlias {
1179         fn read<R: io::Read>(r: &mut R) -> Result<Self, DecodeError> {
1180                 Ok(NodeAlias(Readable::read(r)?))
1181         }
1182 }
1183
1184 #[derive(Clone, Debug, PartialEq, Eq)]
1185 /// Details about a node in the network, known from the network announcement.
1186 pub struct NodeInfo {
1187         /// All valid channels a node has announced
1188         pub channels: Vec<u64>,
1189         /// More information about a node from node_announcement.
1190         /// Optional because we store a Node entry after learning about it from
1191         /// a channel announcement, but before receiving a node announcement.
1192         pub announcement_info: Option<NodeAnnouncementInfo>
1193 }
1194
1195 impl fmt::Display for NodeInfo {
1196         fn fmt(&self, f: &mut fmt::Formatter) -> Result<(), fmt::Error> {
1197                 write!(f, " channels: {:?}, announcement_info: {:?}",
1198                         &self.channels[..], self.announcement_info)?;
1199                 Ok(())
1200         }
1201 }
1202
1203 impl Writeable for NodeInfo {
1204         fn write<W: crate::util::ser::Writer>(&self, writer: &mut W) -> Result<(), io::Error> {
1205                 write_tlv_fields!(writer, {
1206                         // Note that older versions of LDK wrote the lowest inbound fees here at type 0
1207                         (2, self.announcement_info, option),
1208                         (4, self.channels, vec_type),
1209                 });
1210                 Ok(())
1211         }
1212 }
1213
1214 // A wrapper allowing for the optional deserialization of `NodeAnnouncementInfo`. Utilizing this is
1215 // necessary to maintain compatibility with previous serializations of `NetAddress` that have an
1216 // invalid hostname set. We ignore and eat all errors until we are either able to read a
1217 // `NodeAnnouncementInfo` or hit a `ShortRead`, i.e., read the TLV field to the end.
1218 struct NodeAnnouncementInfoDeserWrapper(NodeAnnouncementInfo);
1219
1220 impl MaybeReadable for NodeAnnouncementInfoDeserWrapper {
1221         fn read<R: io::Read>(reader: &mut R) -> Result<Option<Self>, DecodeError> {
1222                 match crate::util::ser::Readable::read(reader) {
1223                         Ok(node_announcement_info) => return Ok(Some(Self(node_announcement_info))),
1224                         Err(_) => {
1225                                 copy(reader, &mut sink()).unwrap();
1226                                 return Ok(None)
1227                         },
1228                 };
1229         }
1230 }
1231
1232 impl Readable for NodeInfo {
1233         fn read<R: io::Read>(reader: &mut R) -> Result<Self, DecodeError> {
1234                 // Historically, we tracked the lowest inbound fees for any node in order to use it as an
1235                 // A* heuristic when routing. Sadly, these days many, many nodes have at least one channel
1236                 // with zero inbound fees, causing that heuristic to provide little gain. Worse, because it
1237                 // requires additional complexity and lookups during routing, it ends up being a
1238                 // performance loss. Thus, we simply ignore the old field here and no longer track it.
1239                 let mut _lowest_inbound_channel_fees: Option<RoutingFees> = None;
1240                 let mut announcement_info_wrap: Option<NodeAnnouncementInfoDeserWrapper> = None;
1241                 _init_tlv_field_var!(channels, vec_type);
1242
1243                 read_tlv_fields!(reader, {
1244                         (0, _lowest_inbound_channel_fees, option),
1245                         (2, announcement_info_wrap, upgradable_option),
1246                         (4, channels, vec_type),
1247                 });
1248
1249                 Ok(NodeInfo {
1250                         announcement_info: announcement_info_wrap.map(|w| w.0),
1251                         channels: _init_tlv_based_struct_field!(channels, vec_type),
1252                 })
1253         }
1254 }
1255
1256 const SERIALIZATION_VERSION: u8 = 1;
1257 const MIN_SERIALIZATION_VERSION: u8 = 1;
1258
1259 impl<L: Deref> Writeable for NetworkGraph<L> where L::Target: Logger {
1260         fn write<W: Writer>(&self, writer: &mut W) -> Result<(), io::Error> {
1261                 write_ver_prefix!(writer, SERIALIZATION_VERSION, MIN_SERIALIZATION_VERSION);
1262
1263                 self.genesis_hash.write(writer)?;
1264                 let channels = self.channels.read().unwrap();
1265                 (channels.len() as u64).write(writer)?;
1266                 for (ref chan_id, ref chan_info) in channels.unordered_iter() {
1267                         (*chan_id).write(writer)?;
1268                         chan_info.write(writer)?;
1269                 }
1270                 let nodes = self.nodes.read().unwrap();
1271                 (nodes.len() as u64).write(writer)?;
1272                 for (ref node_id, ref node_info) in nodes.unordered_iter() {
1273                         node_id.write(writer)?;
1274                         node_info.write(writer)?;
1275                 }
1276
1277                 let last_rapid_gossip_sync_timestamp = self.get_last_rapid_gossip_sync_timestamp();
1278                 write_tlv_fields!(writer, {
1279                         (1, last_rapid_gossip_sync_timestamp, option),
1280                 });
1281                 Ok(())
1282         }
1283 }
1284
1285 impl<L: Deref> ReadableArgs<L> for NetworkGraph<L> where L::Target: Logger {
1286         fn read<R: io::Read>(reader: &mut R, logger: L) -> Result<NetworkGraph<L>, DecodeError> {
1287                 let _ver = read_ver_prefix!(reader, SERIALIZATION_VERSION);
1288
1289                 let genesis_hash: BlockHash = Readable::read(reader)?;
1290                 let channels_count: u64 = Readable::read(reader)?;
1291                 let mut channels = IndexedMap::new();
1292                 for _ in 0..channels_count {
1293                         let chan_id: u64 = Readable::read(reader)?;
1294                         let chan_info = Readable::read(reader)?;
1295                         channels.insert(chan_id, chan_info);
1296                 }
1297                 let nodes_count: u64 = Readable::read(reader)?;
1298                 let mut nodes = IndexedMap::new();
1299                 for _ in 0..nodes_count {
1300                         let node_id = Readable::read(reader)?;
1301                         let node_info = Readable::read(reader)?;
1302                         nodes.insert(node_id, node_info);
1303                 }
1304
1305                 let mut last_rapid_gossip_sync_timestamp: Option<u32> = None;
1306                 read_tlv_fields!(reader, {
1307                         (1, last_rapid_gossip_sync_timestamp, option),
1308                 });
1309
1310                 Ok(NetworkGraph {
1311                         secp_ctx: Secp256k1::verification_only(),
1312                         genesis_hash,
1313                         logger,
1314                         channels: RwLock::new(channels),
1315                         nodes: RwLock::new(nodes),
1316                         last_rapid_gossip_sync_timestamp: Mutex::new(last_rapid_gossip_sync_timestamp),
1317                         removed_nodes: Mutex::new(HashMap::new()),
1318                         removed_channels: Mutex::new(HashMap::new()),
1319                         pending_checks: utxo::PendingChecks::new(),
1320                 })
1321         }
1322 }
1323
1324 impl<L: Deref> fmt::Display for NetworkGraph<L> where L::Target: Logger {
1325         fn fmt(&self, f: &mut fmt::Formatter) -> Result<(), fmt::Error> {
1326                 writeln!(f, "Network map\n[Channels]")?;
1327                 for (key, val) in self.channels.read().unwrap().unordered_iter() {
1328                         writeln!(f, " {}: {}", key, val)?;
1329                 }
1330                 writeln!(f, "[Nodes]")?;
1331                 for (&node_id, val) in self.nodes.read().unwrap().unordered_iter() {
1332                         writeln!(f, " {}: {}", log_bytes!(node_id.as_slice()), val)?;
1333                 }
1334                 Ok(())
1335         }
1336 }
1337
1338 impl<L: Deref> Eq for NetworkGraph<L> where L::Target: Logger {}
1339 impl<L: Deref> PartialEq for NetworkGraph<L> where L::Target: Logger {
1340         fn eq(&self, other: &Self) -> bool {
1341                 // For a total lockorder, sort by position in memory and take the inner locks in that order.
1342                 // (Assumes that we can't move within memory while a lock is held).
1343                 let ord = ((self as *const _) as usize) < ((other as *const _) as usize);
1344                 let a = if ord { (&self.channels, &self.nodes) } else { (&other.channels, &other.nodes) };
1345                 let b = if ord { (&other.channels, &other.nodes) } else { (&self.channels, &self.nodes) };
1346                 let (channels_a, channels_b) = (a.0.unsafe_well_ordered_double_lock_self(), b.0.unsafe_well_ordered_double_lock_self());
1347                 let (nodes_a, nodes_b) = (a.1.unsafe_well_ordered_double_lock_self(), b.1.unsafe_well_ordered_double_lock_self());
1348                 self.genesis_hash.eq(&other.genesis_hash) && channels_a.eq(&channels_b) && nodes_a.eq(&nodes_b)
1349         }
1350 }
1351
1352 impl<L: Deref> NetworkGraph<L> where L::Target: Logger {
1353         /// Creates a new, empty, network graph.
1354         pub fn new(network: Network, logger: L) -> NetworkGraph<L> {
1355                 Self {
1356                         secp_ctx: Secp256k1::verification_only(),
1357                         genesis_hash: genesis_block(network).header.block_hash(),
1358                         logger,
1359                         channels: RwLock::new(IndexedMap::new()),
1360                         nodes: RwLock::new(IndexedMap::new()),
1361                         last_rapid_gossip_sync_timestamp: Mutex::new(None),
1362                         removed_channels: Mutex::new(HashMap::new()),
1363                         removed_nodes: Mutex::new(HashMap::new()),
1364                         pending_checks: utxo::PendingChecks::new(),
1365                 }
1366         }
1367
1368         /// Returns a read-only view of the network graph.
1369         pub fn read_only(&'_ self) -> ReadOnlyNetworkGraph<'_> {
1370                 let channels = self.channels.read().unwrap();
1371                 let nodes = self.nodes.read().unwrap();
1372                 ReadOnlyNetworkGraph {
1373                         channels,
1374                         nodes,
1375                 }
1376         }
1377
1378         /// The unix timestamp provided by the most recent rapid gossip sync.
1379         /// It will be set by the rapid sync process after every sync completion.
1380         pub fn get_last_rapid_gossip_sync_timestamp(&self) -> Option<u32> {
1381                 self.last_rapid_gossip_sync_timestamp.lock().unwrap().clone()
1382         }
1383
1384         /// Update the unix timestamp provided by the most recent rapid gossip sync.
1385         /// This should be done automatically by the rapid sync process after every sync completion.
1386         pub fn set_last_rapid_gossip_sync_timestamp(&self, last_rapid_gossip_sync_timestamp: u32) {
1387                 self.last_rapid_gossip_sync_timestamp.lock().unwrap().replace(last_rapid_gossip_sync_timestamp);
1388         }
1389
1390         /// Clears the `NodeAnnouncementInfo` field for all nodes in the `NetworkGraph` for testing
1391         /// purposes.
1392         #[cfg(test)]
1393         pub fn clear_nodes_announcement_info(&self) {
1394                 for node in self.nodes.write().unwrap().unordered_iter_mut() {
1395                         node.1.announcement_info = None;
1396                 }
1397         }
1398
1399         /// For an already known node (from channel announcements), update its stored properties from a
1400         /// given node announcement.
1401         ///
1402         /// You probably don't want to call this directly, instead relying on a P2PGossipSync's
1403         /// RoutingMessageHandler implementation to call it indirectly. This may be useful to accept
1404         /// routing messages from a source using a protocol other than the lightning P2P protocol.
1405         pub fn update_node_from_announcement(&self, msg: &msgs::NodeAnnouncement) -> Result<(), LightningError> {
1406                 let msg_hash = hash_to_message!(&Sha256dHash::hash(&msg.contents.encode()[..])[..]);
1407                 secp_verify_sig!(self.secp_ctx, &msg_hash, &msg.signature, &get_pubkey_from_node_id!(msg.contents.node_id, "node_announcement"), "node_announcement");
1408                 self.update_node_from_announcement_intern(&msg.contents, Some(&msg))
1409         }
1410
1411         /// For an already known node (from channel announcements), update its stored properties from a
1412         /// given node announcement without verifying the associated signatures. Because we aren't
1413         /// given the associated signatures here we cannot relay the node announcement to any of our
1414         /// peers.
1415         pub fn update_node_from_unsigned_announcement(&self, msg: &msgs::UnsignedNodeAnnouncement) -> Result<(), LightningError> {
1416                 self.update_node_from_announcement_intern(msg, None)
1417         }
1418
1419         fn update_node_from_announcement_intern(&self, msg: &msgs::UnsignedNodeAnnouncement, full_msg: Option<&msgs::NodeAnnouncement>) -> Result<(), LightningError> {
1420                 let mut nodes = self.nodes.write().unwrap();
1421                 match nodes.get_mut(&msg.node_id) {
1422                         None => {
1423                                 core::mem::drop(nodes);
1424                                 self.pending_checks.check_hold_pending_node_announcement(msg, full_msg)?;
1425                                 Err(LightningError{err: "No existing channels for node_announcement".to_owned(), action: ErrorAction::IgnoreError})
1426                         },
1427                         Some(node) => {
1428                                 if let Some(node_info) = node.announcement_info.as_ref() {
1429                                         // The timestamp field is somewhat of a misnomer - the BOLTs use it to order
1430                                         // updates to ensure you always have the latest one, only vaguely suggesting
1431                                         // that it be at least the current time.
1432                                         if node_info.last_update  > msg.timestamp {
1433                                                 return Err(LightningError{err: "Update older than last processed update".to_owned(), action: ErrorAction::IgnoreDuplicateGossip});
1434                                         } else if node_info.last_update  == msg.timestamp {
1435                                                 return Err(LightningError{err: "Update had the same timestamp as last processed update".to_owned(), action: ErrorAction::IgnoreDuplicateGossip});
1436                                         }
1437                                 }
1438
1439                                 let should_relay =
1440                                         msg.excess_data.len() <= MAX_EXCESS_BYTES_FOR_RELAY &&
1441                                         msg.excess_address_data.len() <= MAX_EXCESS_BYTES_FOR_RELAY &&
1442                                         msg.excess_data.len() + msg.excess_address_data.len() <= MAX_EXCESS_BYTES_FOR_RELAY;
1443                                 node.announcement_info = Some(NodeAnnouncementInfo {
1444                                         features: msg.features.clone(),
1445                                         last_update: msg.timestamp,
1446                                         rgb: msg.rgb,
1447                                         alias: msg.alias,
1448                                         announcement_message: if should_relay { full_msg.cloned() } else { None },
1449                                 });
1450
1451                                 Ok(())
1452                         }
1453                 }
1454         }
1455
1456         /// Store or update channel info from a channel announcement.
1457         ///
1458         /// You probably don't want to call this directly, instead relying on a [`P2PGossipSync`]'s
1459         /// [`RoutingMessageHandler`] implementation to call it indirectly. This may be useful to accept
1460         /// routing messages from a source using a protocol other than the lightning P2P protocol.
1461         ///
1462         /// If a [`UtxoLookup`] object is provided via `utxo_lookup`, it will be called to verify
1463         /// the corresponding UTXO exists on chain and is correctly-formatted.
1464         pub fn update_channel_from_announcement<U: Deref>(
1465                 &self, msg: &msgs::ChannelAnnouncement, utxo_lookup: &Option<U>,
1466         ) -> Result<(), LightningError>
1467         where
1468                 U::Target: UtxoLookup,
1469         {
1470                 let msg_hash = hash_to_message!(&Sha256dHash::hash(&msg.contents.encode()[..])[..]);
1471                 secp_verify_sig!(self.secp_ctx, &msg_hash, &msg.node_signature_1, &get_pubkey_from_node_id!(msg.contents.node_id_1, "channel_announcement"), "channel_announcement");
1472                 secp_verify_sig!(self.secp_ctx, &msg_hash, &msg.node_signature_2, &get_pubkey_from_node_id!(msg.contents.node_id_2, "channel_announcement"), "channel_announcement");
1473                 secp_verify_sig!(self.secp_ctx, &msg_hash, &msg.bitcoin_signature_1, &get_pubkey_from_node_id!(msg.contents.bitcoin_key_1, "channel_announcement"), "channel_announcement");
1474                 secp_verify_sig!(self.secp_ctx, &msg_hash, &msg.bitcoin_signature_2, &get_pubkey_from_node_id!(msg.contents.bitcoin_key_2, "channel_announcement"), "channel_announcement");
1475                 self.update_channel_from_unsigned_announcement_intern(&msg.contents, Some(msg), utxo_lookup)
1476         }
1477
1478         /// Store or update channel info from a channel announcement.
1479         ///
1480         /// You probably don't want to call this directly, instead relying on a [`P2PGossipSync`]'s
1481         /// [`RoutingMessageHandler`] implementation to call it indirectly. This may be useful to accept
1482         /// routing messages from a source using a protocol other than the lightning P2P protocol.
1483         ///
1484         /// This will skip verification of if the channel is actually on-chain.
1485         pub fn update_channel_from_announcement_no_lookup(
1486                 &self, msg: &ChannelAnnouncement
1487         ) -> Result<(), LightningError> {
1488                 self.update_channel_from_announcement::<&UtxoResolver>(msg, &None)
1489         }
1490
1491         /// Store or update channel info from a channel announcement without verifying the associated
1492         /// signatures. Because we aren't given the associated signatures here we cannot relay the
1493         /// channel announcement to any of our peers.
1494         ///
1495         /// If a [`UtxoLookup`] object is provided via `utxo_lookup`, it will be called to verify
1496         /// the corresponding UTXO exists on chain and is correctly-formatted.
1497         pub fn update_channel_from_unsigned_announcement<U: Deref>(
1498                 &self, msg: &msgs::UnsignedChannelAnnouncement, utxo_lookup: &Option<U>
1499         ) -> Result<(), LightningError>
1500         where
1501                 U::Target: UtxoLookup,
1502         {
1503                 self.update_channel_from_unsigned_announcement_intern(msg, None, utxo_lookup)
1504         }
1505
1506         /// Update channel from partial announcement data received via rapid gossip sync
1507         ///
1508         /// `timestamp: u64`: Timestamp emulating the backdated original announcement receipt (by the
1509         /// rapid gossip sync server)
1510         ///
1511         /// All other parameters as used in [`msgs::UnsignedChannelAnnouncement`] fields.
1512         pub fn add_channel_from_partial_announcement(&self, short_channel_id: u64, timestamp: u64, features: ChannelFeatures, node_id_1: PublicKey, node_id_2: PublicKey) -> Result<(), LightningError> {
1513                 if node_id_1 == node_id_2 {
1514                         return Err(LightningError{err: "Channel announcement node had a channel with itself".to_owned(), action: ErrorAction::IgnoreError});
1515                 };
1516
1517                 let node_1 = NodeId::from_pubkey(&node_id_1);
1518                 let node_2 = NodeId::from_pubkey(&node_id_2);
1519                 let channel_info = ChannelInfo {
1520                         features,
1521                         node_one: node_1.clone(),
1522                         one_to_two: None,
1523                         node_two: node_2.clone(),
1524                         two_to_one: None,
1525                         capacity_sats: None,
1526                         announcement_message: None,
1527                         announcement_received_time: timestamp,
1528                 };
1529
1530                 self.add_channel_between_nodes(short_channel_id, channel_info, None)
1531         }
1532
1533         fn add_channel_between_nodes(&self, short_channel_id: u64, channel_info: ChannelInfo, utxo_value: Option<u64>) -> Result<(), LightningError> {
1534                 let mut channels = self.channels.write().unwrap();
1535                 let mut nodes = self.nodes.write().unwrap();
1536
1537                 let node_id_a = channel_info.node_one.clone();
1538                 let node_id_b = channel_info.node_two.clone();
1539
1540                 match channels.entry(short_channel_id) {
1541                         IndexedMapEntry::Occupied(mut entry) => {
1542                                 //TODO: because asking the blockchain if short_channel_id is valid is only optional
1543                                 //in the blockchain API, we need to handle it smartly here, though it's unclear
1544                                 //exactly how...
1545                                 if utxo_value.is_some() {
1546                                         // Either our UTXO provider is busted, there was a reorg, or the UTXO provider
1547                                         // only sometimes returns results. In any case remove the previous entry. Note
1548                                         // that the spec expects us to "blacklist" the node_ids involved, but we can't
1549                                         // do that because
1550                                         // a) we don't *require* a UTXO provider that always returns results.
1551                                         // b) we don't track UTXOs of channels we know about and remove them if they
1552                                         //    get reorg'd out.
1553                                         // c) it's unclear how to do so without exposing ourselves to massive DoS risk.
1554                                         Self::remove_channel_in_nodes(&mut nodes, &entry.get(), short_channel_id);
1555                                         *entry.get_mut() = channel_info;
1556                                 } else {
1557                                         return Err(LightningError{err: "Already have knowledge of channel".to_owned(), action: ErrorAction::IgnoreDuplicateGossip});
1558                                 }
1559                         },
1560                         IndexedMapEntry::Vacant(entry) => {
1561                                 entry.insert(channel_info);
1562                         }
1563                 };
1564
1565                 for current_node_id in [node_id_a, node_id_b].iter() {
1566                         match nodes.entry(current_node_id.clone()) {
1567                                 IndexedMapEntry::Occupied(node_entry) => {
1568                                         node_entry.into_mut().channels.push(short_channel_id);
1569                                 },
1570                                 IndexedMapEntry::Vacant(node_entry) => {
1571                                         node_entry.insert(NodeInfo {
1572                                                 channels: vec!(short_channel_id),
1573                                                 announcement_info: None,
1574                                         });
1575                                 }
1576                         };
1577                 };
1578
1579                 Ok(())
1580         }
1581
1582         fn update_channel_from_unsigned_announcement_intern<U: Deref>(
1583                 &self, msg: &msgs::UnsignedChannelAnnouncement, full_msg: Option<&msgs::ChannelAnnouncement>, utxo_lookup: &Option<U>
1584         ) -> Result<(), LightningError>
1585         where
1586                 U::Target: UtxoLookup,
1587         {
1588                 if msg.node_id_1 == msg.node_id_2 || msg.bitcoin_key_1 == msg.bitcoin_key_2 {
1589                         return Err(LightningError{err: "Channel announcement node had a channel with itself".to_owned(), action: ErrorAction::IgnoreError});
1590                 }
1591
1592                 if msg.chain_hash != self.genesis_hash {
1593                         return Err(LightningError {
1594                                 err: "Channel announcement chain hash does not match genesis hash".to_owned(),
1595                                 action: ErrorAction::IgnoreAndLog(Level::Debug),
1596                         });
1597                 }
1598
1599                 {
1600                         let channels = self.channels.read().unwrap();
1601
1602                         if let Some(chan) = channels.get(&msg.short_channel_id) {
1603                                 if chan.capacity_sats.is_some() {
1604                                         // If we'd previously looked up the channel on-chain and checked the script
1605                                         // against what appears on-chain, ignore the duplicate announcement.
1606                                         //
1607                                         // Because a reorg could replace one channel with another at the same SCID, if
1608                                         // the channel appears to be different, we re-validate. This doesn't expose us
1609                                         // to any more DoS risk than not, as a peer can always flood us with
1610                                         // randomly-generated SCID values anyway.
1611                                         //
1612                                         // We use the Node IDs rather than the bitcoin_keys to check for "equivalence"
1613                                         // as we didn't (necessarily) store the bitcoin keys, and we only really care
1614                                         // if the peers on the channel changed anyway.
1615                                         if msg.node_id_1 == chan.node_one && msg.node_id_2 == chan.node_two {
1616                                                 return Err(LightningError {
1617                                                         err: "Already have chain-validated channel".to_owned(),
1618                                                         action: ErrorAction::IgnoreDuplicateGossip
1619                                                 });
1620                                         }
1621                                 } else if utxo_lookup.is_none() {
1622                                         // Similarly, if we can't check the chain right now anyway, ignore the
1623                                         // duplicate announcement without bothering to take the channels write lock.
1624                                         return Err(LightningError {
1625                                                 err: "Already have non-chain-validated channel".to_owned(),
1626                                                 action: ErrorAction::IgnoreDuplicateGossip
1627                                         });
1628                                 }
1629                         }
1630                 }
1631
1632                 {
1633                         let removed_channels = self.removed_channels.lock().unwrap();
1634                         let removed_nodes = self.removed_nodes.lock().unwrap();
1635                         if removed_channels.contains_key(&msg.short_channel_id) ||
1636                                 removed_nodes.contains_key(&msg.node_id_1) ||
1637                                 removed_nodes.contains_key(&msg.node_id_2) {
1638                                 return Err(LightningError{
1639                                         err: format!("Channel with SCID {} or one of its nodes was removed from our network graph recently", &msg.short_channel_id),
1640                                         action: ErrorAction::IgnoreAndLog(Level::Gossip)});
1641                         }
1642                 }
1643
1644                 let utxo_value = self.pending_checks.check_channel_announcement(
1645                         utxo_lookup, msg, full_msg)?;
1646
1647                 #[allow(unused_mut, unused_assignments)]
1648                 let mut announcement_received_time = 0;
1649                 #[cfg(feature = "std")]
1650                 {
1651                         announcement_received_time = SystemTime::now().duration_since(UNIX_EPOCH).expect("Time must be > 1970").as_secs();
1652                 }
1653
1654                 let chan_info = ChannelInfo {
1655                         features: msg.features.clone(),
1656                         node_one: msg.node_id_1,
1657                         one_to_two: None,
1658                         node_two: msg.node_id_2,
1659                         two_to_one: None,
1660                         capacity_sats: utxo_value,
1661                         announcement_message: if msg.excess_data.len() <= MAX_EXCESS_BYTES_FOR_RELAY
1662                                 { full_msg.cloned() } else { None },
1663                         announcement_received_time,
1664                 };
1665
1666                 self.add_channel_between_nodes(msg.short_channel_id, chan_info, utxo_value)?;
1667
1668                 log_gossip!(self.logger, "Added channel_announcement for {}{}", msg.short_channel_id, if !msg.excess_data.is_empty() { " with excess uninterpreted data!" } else { "" });
1669                 Ok(())
1670         }
1671
1672         /// Marks a channel in the graph as failed permanently.
1673         ///
1674         /// The channel and any node for which this was their last channel are removed from the graph.
1675         pub fn channel_failed_permanent(&self, short_channel_id: u64) {
1676                 #[cfg(feature = "std")]
1677                 let current_time_unix = Some(SystemTime::now().duration_since(UNIX_EPOCH).expect("Time must be > 1970").as_secs());
1678                 #[cfg(not(feature = "std"))]
1679                 let current_time_unix = None;
1680
1681                 self.channel_failed_permanent_with_time(short_channel_id, current_time_unix)
1682         }
1683
1684         /// Marks a channel in the graph as failed permanently.
1685         ///
1686         /// The channel and any node for which this was their last channel are removed from the graph.
1687         fn channel_failed_permanent_with_time(&self, short_channel_id: u64, current_time_unix: Option<u64>) {
1688                 let mut channels = self.channels.write().unwrap();
1689                 if let Some(chan) = channels.remove(&short_channel_id) {
1690                         let mut nodes = self.nodes.write().unwrap();
1691                         self.removed_channels.lock().unwrap().insert(short_channel_id, current_time_unix);
1692                         Self::remove_channel_in_nodes(&mut nodes, &chan, short_channel_id);
1693                 }
1694         }
1695
1696         /// Marks a node in the graph as permanently failed, effectively removing it and its channels
1697         /// from local storage.
1698         pub fn node_failed_permanent(&self, node_id: &PublicKey) {
1699                 #[cfg(feature = "std")]
1700                 let current_time_unix = Some(SystemTime::now().duration_since(UNIX_EPOCH).expect("Time must be > 1970").as_secs());
1701                 #[cfg(not(feature = "std"))]
1702                 let current_time_unix = None;
1703
1704                 let node_id = NodeId::from_pubkey(node_id);
1705                 let mut channels = self.channels.write().unwrap();
1706                 let mut nodes = self.nodes.write().unwrap();
1707                 let mut removed_channels = self.removed_channels.lock().unwrap();
1708                 let mut removed_nodes = self.removed_nodes.lock().unwrap();
1709
1710                 if let Some(node) = nodes.remove(&node_id) {
1711                         for scid in node.channels.iter() {
1712                                 if let Some(chan_info) = channels.remove(scid) {
1713                                         let other_node_id = if node_id == chan_info.node_one { chan_info.node_two } else { chan_info.node_one };
1714                                         if let IndexedMapEntry::Occupied(mut other_node_entry) = nodes.entry(other_node_id) {
1715                                                 other_node_entry.get_mut().channels.retain(|chan_id| {
1716                                                         *scid != *chan_id
1717                                                 });
1718                                                 if other_node_entry.get().channels.is_empty() {
1719                                                         other_node_entry.remove_entry();
1720                                                 }
1721                                         }
1722                                         removed_channels.insert(*scid, current_time_unix);
1723                                 }
1724                         }
1725                         removed_nodes.insert(node_id, current_time_unix);
1726                 }
1727         }
1728
1729         #[cfg(feature = "std")]
1730         /// Removes information about channels that we haven't heard any updates about in some time.
1731         /// This can be used regularly to prune the network graph of channels that likely no longer
1732         /// exist.
1733         ///
1734         /// While there is no formal requirement that nodes regularly re-broadcast their channel
1735         /// updates every two weeks, the non-normative section of BOLT 7 currently suggests that
1736         /// pruning occur for updates which are at least two weeks old, which we implement here.
1737         ///
1738         /// Note that for users of the `lightning-background-processor` crate this method may be
1739         /// automatically called regularly for you.
1740         ///
1741         /// This method will also cause us to stop tracking removed nodes and channels if they have been
1742         /// in the map for a while so that these can be resynced from gossip in the future.
1743         ///
1744         /// This method is only available with the `std` feature. See
1745         /// [`NetworkGraph::remove_stale_channels_and_tracking_with_time`] for `no-std` use.
1746         pub fn remove_stale_channels_and_tracking(&self) {
1747                 let time = SystemTime::now().duration_since(UNIX_EPOCH).expect("Time must be > 1970").as_secs();
1748                 self.remove_stale_channels_and_tracking_with_time(time);
1749         }
1750
1751         /// Removes information about channels that we haven't heard any updates about in some time.
1752         /// This can be used regularly to prune the network graph of channels that likely no longer
1753         /// exist.
1754         ///
1755         /// While there is no formal requirement that nodes regularly re-broadcast their channel
1756         /// updates every two weeks, the non-normative section of BOLT 7 currently suggests that
1757         /// pruning occur for updates which are at least two weeks old, which we implement here.
1758         ///
1759         /// This method will also cause us to stop tracking removed nodes and channels if they have been
1760         /// in the map for a while so that these can be resynced from gossip in the future.
1761         ///
1762         /// This function takes the current unix time as an argument. For users with the `std` feature
1763         /// enabled, [`NetworkGraph::remove_stale_channels_and_tracking`] may be preferable.
1764         pub fn remove_stale_channels_and_tracking_with_time(&self, current_time_unix: u64) {
1765                 let mut channels = self.channels.write().unwrap();
1766                 // Time out if we haven't received an update in at least 14 days.
1767                 if current_time_unix > u32::max_value() as u64 { return; } // Remove by 2106
1768                 if current_time_unix < STALE_CHANNEL_UPDATE_AGE_LIMIT_SECS { return; }
1769                 let min_time_unix: u32 = (current_time_unix - STALE_CHANNEL_UPDATE_AGE_LIMIT_SECS) as u32;
1770                 // Sadly BTreeMap::retain was only stabilized in 1.53 so we can't switch to it for some
1771                 // time.
1772                 let mut scids_to_remove = Vec::new();
1773                 for (scid, info) in channels.unordered_iter_mut() {
1774                         if info.one_to_two.is_some() && info.one_to_two.as_ref().unwrap().last_update < min_time_unix {
1775                                 info.one_to_two = None;
1776                         }
1777                         if info.two_to_one.is_some() && info.two_to_one.as_ref().unwrap().last_update < min_time_unix {
1778                                 info.two_to_one = None;
1779                         }
1780                         if info.one_to_two.is_none() || info.two_to_one.is_none() {
1781                                 // We check the announcement_received_time here to ensure we don't drop
1782                                 // announcements that we just received and are just waiting for our peer to send a
1783                                 // channel_update for.
1784                                 if info.announcement_received_time < min_time_unix as u64 {
1785                                         scids_to_remove.push(*scid);
1786                                 }
1787                         }
1788                 }
1789                 if !scids_to_remove.is_empty() {
1790                         let mut nodes = self.nodes.write().unwrap();
1791                         for scid in scids_to_remove {
1792                                 let info = channels.remove(&scid).expect("We just accessed this scid, it should be present");
1793                                 Self::remove_channel_in_nodes(&mut nodes, &info, scid);
1794                                 self.removed_channels.lock().unwrap().insert(scid, Some(current_time_unix));
1795                         }
1796                 }
1797
1798                 let should_keep_tracking = |time: &mut Option<u64>| {
1799                         if let Some(time) = time {
1800                                 current_time_unix.saturating_sub(*time) < REMOVED_ENTRIES_TRACKING_AGE_LIMIT_SECS
1801                         } else {
1802                                 // NOTE: In the case of no-std, we won't have access to the current UNIX time at the time of removal,
1803                                 // so we'll just set the removal time here to the current UNIX time on the very next invocation
1804                                 // of this function.
1805                                 #[cfg(feature = "no-std")]
1806                                 {
1807                                         let mut tracked_time = Some(current_time_unix);
1808                                         core::mem::swap(time, &mut tracked_time);
1809                                         return true;
1810                                 }
1811                                 #[allow(unreachable_code)]
1812                                 false
1813                         }};
1814
1815                 self.removed_channels.lock().unwrap().retain(|_, time| should_keep_tracking(time));
1816                 self.removed_nodes.lock().unwrap().retain(|_, time| should_keep_tracking(time));
1817         }
1818
1819         /// For an already known (from announcement) channel, update info about one of the directions
1820         /// of the channel.
1821         ///
1822         /// You probably don't want to call this directly, instead relying on a P2PGossipSync's
1823         /// RoutingMessageHandler implementation to call it indirectly. This may be useful to accept
1824         /// routing messages from a source using a protocol other than the lightning P2P protocol.
1825         ///
1826         /// If built with `no-std`, any updates with a timestamp more than two weeks in the past or
1827         /// materially in the future will be rejected.
1828         pub fn update_channel(&self, msg: &msgs::ChannelUpdate) -> Result<(), LightningError> {
1829                 self.update_channel_intern(&msg.contents, Some(&msg), Some(&msg.signature))
1830         }
1831
1832         /// For an already known (from announcement) channel, update info about one of the directions
1833         /// of the channel without verifying the associated signatures. Because we aren't given the
1834         /// associated signatures here we cannot relay the channel update to any of our peers.
1835         ///
1836         /// If built with `no-std`, any updates with a timestamp more than two weeks in the past or
1837         /// materially in the future will be rejected.
1838         pub fn update_channel_unsigned(&self, msg: &msgs::UnsignedChannelUpdate) -> Result<(), LightningError> {
1839                 self.update_channel_intern(msg, None, None)
1840         }
1841
1842         fn update_channel_intern(&self, msg: &msgs::UnsignedChannelUpdate, full_msg: Option<&msgs::ChannelUpdate>, sig: Option<&secp256k1::ecdsa::Signature>) -> Result<(), LightningError> {
1843                 let chan_enabled = msg.flags & (1 << 1) != (1 << 1);
1844
1845                 if msg.chain_hash != self.genesis_hash {
1846                         return Err(LightningError {
1847                                 err: "Channel update chain hash does not match genesis hash".to_owned(),
1848                                 action: ErrorAction::IgnoreAndLog(Level::Debug),
1849                         });
1850                 }
1851
1852                 #[cfg(all(feature = "std", not(test), not(feature = "_test_utils")))]
1853                 {
1854                         // Note that many tests rely on being able to set arbitrarily old timestamps, thus we
1855                         // disable this check during tests!
1856                         let time = SystemTime::now().duration_since(UNIX_EPOCH).expect("Time must be > 1970").as_secs();
1857                         if (msg.timestamp as u64) < time - STALE_CHANNEL_UPDATE_AGE_LIMIT_SECS {
1858                                 return Err(LightningError{err: "channel_update is older than two weeks old".to_owned(), action: ErrorAction::IgnoreAndLog(Level::Gossip)});
1859                         }
1860                         if msg.timestamp as u64 > time + 60 * 60 * 24 {
1861                                 return Err(LightningError{err: "channel_update has a timestamp more than a day in the future".to_owned(), action: ErrorAction::IgnoreAndLog(Level::Gossip)});
1862                         }
1863                 }
1864
1865                 let mut channels = self.channels.write().unwrap();
1866                 match channels.get_mut(&msg.short_channel_id) {
1867                         None => {
1868                                 core::mem::drop(channels);
1869                                 self.pending_checks.check_hold_pending_channel_update(msg, full_msg)?;
1870                                 return Err(LightningError{err: "Couldn't find channel for update".to_owned(), action: ErrorAction::IgnoreError});
1871                         },
1872                         Some(channel) => {
1873                                 if msg.htlc_maximum_msat > MAX_VALUE_MSAT {
1874                                         return Err(LightningError{err:
1875                                                 "htlc_maximum_msat is larger than maximum possible msats".to_owned(),
1876                                                 action: ErrorAction::IgnoreError});
1877                                 }
1878
1879                                 if let Some(capacity_sats) = channel.capacity_sats {
1880                                         // It's possible channel capacity is available now, although it wasn't available at announcement (so the field is None).
1881                                         // Don't query UTXO set here to reduce DoS risks.
1882                                         if capacity_sats > MAX_VALUE_MSAT / 1000 || msg.htlc_maximum_msat > capacity_sats * 1000 {
1883                                                 return Err(LightningError{err:
1884                                                         "htlc_maximum_msat is larger than channel capacity or capacity is bogus".to_owned(),
1885                                                         action: ErrorAction::IgnoreError});
1886                                         }
1887                                 }
1888                                 macro_rules! check_update_latest {
1889                                         ($target: expr) => {
1890                                                 if let Some(existing_chan_info) = $target.as_ref() {
1891                                                         // The timestamp field is somewhat of a misnomer - the BOLTs use it to
1892                                                         // order updates to ensure you always have the latest one, only
1893                                                         // suggesting  that it be at least the current time. For
1894                                                         // channel_updates specifically, the BOLTs discuss the possibility of
1895                                                         // pruning based on the timestamp field being more than two weeks old,
1896                                                         // but only in the non-normative section.
1897                                                         if existing_chan_info.last_update > msg.timestamp {
1898                                                                 return Err(LightningError{err: "Update older than last processed update".to_owned(), action: ErrorAction::IgnoreDuplicateGossip});
1899                                                         } else if existing_chan_info.last_update == msg.timestamp {
1900                                                                 return Err(LightningError{err: "Update had same timestamp as last processed update".to_owned(), action: ErrorAction::IgnoreDuplicateGossip});
1901                                                         }
1902                                                 }
1903                                         }
1904                                 }
1905
1906                                 macro_rules! get_new_channel_info {
1907                                         () => { {
1908                                                 let last_update_message = if msg.excess_data.len() <= MAX_EXCESS_BYTES_FOR_RELAY
1909                                                         { full_msg.cloned() } else { None };
1910
1911                                                 let updated_channel_update_info = ChannelUpdateInfo {
1912                                                         enabled: chan_enabled,
1913                                                         last_update: msg.timestamp,
1914                                                         cltv_expiry_delta: msg.cltv_expiry_delta,
1915                                                         htlc_minimum_msat: msg.htlc_minimum_msat,
1916                                                         htlc_maximum_msat: msg.htlc_maximum_msat,
1917                                                         fees: RoutingFees {
1918                                                                 base_msat: msg.fee_base_msat,
1919                                                                 proportional_millionths: msg.fee_proportional_millionths,
1920                                                         },
1921                                                         last_update_message
1922                                                 };
1923                                                 Some(updated_channel_update_info)
1924                                         } }
1925                                 }
1926
1927                                 let msg_hash = hash_to_message!(&Sha256dHash::hash(&msg.encode()[..])[..]);
1928                                 if msg.flags & 1 == 1 {
1929                                         check_update_latest!(channel.two_to_one);
1930                                         if let Some(sig) = sig {
1931                                                 secp_verify_sig!(self.secp_ctx, &msg_hash, &sig, &PublicKey::from_slice(channel.node_two.as_slice()).map_err(|_| LightningError{
1932                                                         err: "Couldn't parse source node pubkey".to_owned(),
1933                                                         action: ErrorAction::IgnoreAndLog(Level::Debug)
1934                                                 })?, "channel_update");
1935                                         }
1936                                         channel.two_to_one = get_new_channel_info!();
1937                                 } else {
1938                                         check_update_latest!(channel.one_to_two);
1939                                         if let Some(sig) = sig {
1940                                                 secp_verify_sig!(self.secp_ctx, &msg_hash, &sig, &PublicKey::from_slice(channel.node_one.as_slice()).map_err(|_| LightningError{
1941                                                         err: "Couldn't parse destination node pubkey".to_owned(),
1942                                                         action: ErrorAction::IgnoreAndLog(Level::Debug)
1943                                                 })?, "channel_update");
1944                                         }
1945                                         channel.one_to_two = get_new_channel_info!();
1946                                 }
1947                         }
1948                 }
1949
1950                 Ok(())
1951         }
1952
1953         fn remove_channel_in_nodes(nodes: &mut IndexedMap<NodeId, NodeInfo>, chan: &ChannelInfo, short_channel_id: u64) {
1954                 macro_rules! remove_from_node {
1955                         ($node_id: expr) => {
1956                                 if let IndexedMapEntry::Occupied(mut entry) = nodes.entry($node_id) {
1957                                         entry.get_mut().channels.retain(|chan_id| {
1958                                                 short_channel_id != *chan_id
1959                                         });
1960                                         if entry.get().channels.is_empty() {
1961                                                 entry.remove_entry();
1962                                         }
1963                                 } else {
1964                                         panic!("Had channel that pointed to unknown node (ie inconsistent network map)!");
1965                                 }
1966                         }
1967                 }
1968
1969                 remove_from_node!(chan.node_one);
1970                 remove_from_node!(chan.node_two);
1971         }
1972 }
1973
1974 impl ReadOnlyNetworkGraph<'_> {
1975         /// Returns all known valid channels' short ids along with announced channel info.
1976         ///
1977         /// This is not exported to bindings users because we don't want to return lifetime'd references
1978         pub fn channels(&self) -> &IndexedMap<u64, ChannelInfo> {
1979                 &*self.channels
1980         }
1981
1982         /// Returns information on a channel with the given id.
1983         pub fn channel(&self, short_channel_id: u64) -> Option<&ChannelInfo> {
1984                 self.channels.get(&short_channel_id)
1985         }
1986
1987         #[cfg(c_bindings)] // Non-bindings users should use `channels`
1988         /// Returns the list of channels in the graph
1989         pub fn list_channels(&self) -> Vec<u64> {
1990                 self.channels.unordered_keys().map(|c| *c).collect()
1991         }
1992
1993         /// Returns all known nodes' public keys along with announced node info.
1994         ///
1995         /// This is not exported to bindings users because we don't want to return lifetime'd references
1996         pub fn nodes(&self) -> &IndexedMap<NodeId, NodeInfo> {
1997                 &*self.nodes
1998         }
1999
2000         /// Returns information on a node with the given id.
2001         pub fn node(&self, node_id: &NodeId) -> Option<&NodeInfo> {
2002                 self.nodes.get(node_id)
2003         }
2004
2005         #[cfg(c_bindings)] // Non-bindings users should use `nodes`
2006         /// Returns the list of nodes in the graph
2007         pub fn list_nodes(&self) -> Vec<NodeId> {
2008                 self.nodes.unordered_keys().map(|n| *n).collect()
2009         }
2010
2011         /// Get network addresses by node id.
2012         /// Returns None if the requested node is completely unknown,
2013         /// or if node announcement for the node was never received.
2014         pub fn get_addresses(&self, pubkey: &PublicKey) -> Option<Vec<NetAddress>> {
2015                 self.nodes.get(&NodeId::from_pubkey(&pubkey))
2016                         .and_then(|node| node.announcement_info.as_ref().map(|ann| ann.addresses().to_vec()))
2017         }
2018 }
2019
2020 #[cfg(test)]
2021 pub(crate) mod tests {
2022         use crate::events::{MessageSendEvent, MessageSendEventsProvider};
2023         use crate::ln::channelmanager;
2024         use crate::ln::chan_utils::make_funding_redeemscript;
2025         #[cfg(feature = "std")]
2026         use crate::ln::features::InitFeatures;
2027         use crate::routing::gossip::{P2PGossipSync, NetworkGraph, NetworkUpdate, NodeAlias, MAX_EXCESS_BYTES_FOR_RELAY, NodeId, RoutingFees, ChannelUpdateInfo, ChannelInfo, NodeAnnouncementInfo, NodeInfo};
2028         use crate::routing::utxo::{UtxoLookupError, UtxoResult};
2029         use crate::ln::msgs::{RoutingMessageHandler, UnsignedNodeAnnouncement, NodeAnnouncement,
2030                 UnsignedChannelAnnouncement, ChannelAnnouncement, UnsignedChannelUpdate, ChannelUpdate,
2031                 ReplyChannelRange, QueryChannelRange, QueryShortChannelIds, MAX_VALUE_MSAT};
2032         use crate::util::config::UserConfig;
2033         use crate::util::test_utils;
2034         use crate::util::ser::{ReadableArgs, Readable, Writeable};
2035         use crate::util::scid_utils::scid_from_parts;
2036
2037         use crate::routing::gossip::REMOVED_ENTRIES_TRACKING_AGE_LIMIT_SECS;
2038         use super::STALE_CHANNEL_UPDATE_AGE_LIMIT_SECS;
2039
2040         use bitcoin::hashes::sha256d::Hash as Sha256dHash;
2041         use bitcoin::hashes::Hash;
2042         use bitcoin::network::constants::Network;
2043         use bitcoin::blockdata::constants::genesis_block;
2044         use bitcoin::blockdata::script::Script;
2045         use bitcoin::blockdata::transaction::TxOut;
2046
2047         use hex;
2048
2049         use bitcoin::secp256k1::{PublicKey, SecretKey};
2050         use bitcoin::secp256k1::{All, Secp256k1};
2051
2052         use crate::io;
2053         use bitcoin::secp256k1;
2054         use crate::prelude::*;
2055         use crate::sync::Arc;
2056
2057         fn create_network_graph() -> NetworkGraph<Arc<test_utils::TestLogger>> {
2058                 let logger = Arc::new(test_utils::TestLogger::new());
2059                 NetworkGraph::new(Network::Testnet, logger)
2060         }
2061
2062         fn create_gossip_sync(network_graph: &NetworkGraph<Arc<test_utils::TestLogger>>) -> (
2063                 Secp256k1<All>, P2PGossipSync<&NetworkGraph<Arc<test_utils::TestLogger>>,
2064                 Arc<test_utils::TestChainSource>, Arc<test_utils::TestLogger>>
2065         ) {
2066                 let secp_ctx = Secp256k1::new();
2067                 let logger = Arc::new(test_utils::TestLogger::new());
2068                 let gossip_sync = P2PGossipSync::new(network_graph, None, Arc::clone(&logger));
2069                 (secp_ctx, gossip_sync)
2070         }
2071
2072         #[test]
2073         #[cfg(feature = "std")]
2074         fn request_full_sync_finite_times() {
2075                 let network_graph = create_network_graph();
2076                 let (secp_ctx, gossip_sync) = create_gossip_sync(&network_graph);
2077                 let node_id = PublicKey::from_secret_key(&secp_ctx, &SecretKey::from_slice(&hex::decode("0202020202020202020202020202020202020202020202020202020202020202").unwrap()[..]).unwrap());
2078
2079                 assert!(gossip_sync.should_request_full_sync(&node_id));
2080                 assert!(gossip_sync.should_request_full_sync(&node_id));
2081                 assert!(gossip_sync.should_request_full_sync(&node_id));
2082                 assert!(gossip_sync.should_request_full_sync(&node_id));
2083                 assert!(gossip_sync.should_request_full_sync(&node_id));
2084                 assert!(!gossip_sync.should_request_full_sync(&node_id));
2085         }
2086
2087         pub(crate) fn get_signed_node_announcement<F: Fn(&mut UnsignedNodeAnnouncement)>(f: F, node_key: &SecretKey, secp_ctx: &Secp256k1<secp256k1::All>) -> NodeAnnouncement {
2088                 let node_id = NodeId::from_pubkey(&PublicKey::from_secret_key(&secp_ctx, node_key));
2089                 let mut unsigned_announcement = UnsignedNodeAnnouncement {
2090                         features: channelmanager::provided_node_features(&UserConfig::default()),
2091                         timestamp: 100,
2092                         node_id,
2093                         rgb: [0; 3],
2094                         alias: NodeAlias([0; 32]),
2095                         addresses: Vec::new(),
2096                         excess_address_data: Vec::new(),
2097                         excess_data: Vec::new(),
2098                 };
2099                 f(&mut unsigned_announcement);
2100                 let msghash = hash_to_message!(&Sha256dHash::hash(&unsigned_announcement.encode()[..])[..]);
2101                 NodeAnnouncement {
2102                         signature: secp_ctx.sign_ecdsa(&msghash, node_key),
2103                         contents: unsigned_announcement
2104                 }
2105         }
2106
2107         pub(crate) fn get_signed_channel_announcement<F: Fn(&mut UnsignedChannelAnnouncement)>(f: F, node_1_key: &SecretKey, node_2_key: &SecretKey, secp_ctx: &Secp256k1<secp256k1::All>) -> ChannelAnnouncement {
2108                 let node_id_1 = PublicKey::from_secret_key(&secp_ctx, node_1_key);
2109                 let node_id_2 = PublicKey::from_secret_key(&secp_ctx, node_2_key);
2110                 let node_1_btckey = &SecretKey::from_slice(&[40; 32]).unwrap();
2111                 let node_2_btckey = &SecretKey::from_slice(&[39; 32]).unwrap();
2112
2113                 let mut unsigned_announcement = UnsignedChannelAnnouncement {
2114                         features: channelmanager::provided_channel_features(&UserConfig::default()),
2115                         chain_hash: genesis_block(Network::Testnet).header.block_hash(),
2116                         short_channel_id: 0,
2117                         node_id_1: NodeId::from_pubkey(&node_id_1),
2118                         node_id_2: NodeId::from_pubkey(&node_id_2),
2119                         bitcoin_key_1: NodeId::from_pubkey(&PublicKey::from_secret_key(&secp_ctx, node_1_btckey)),
2120                         bitcoin_key_2: NodeId::from_pubkey(&PublicKey::from_secret_key(&secp_ctx, node_2_btckey)),
2121                         excess_data: Vec::new(),
2122                 };
2123                 f(&mut unsigned_announcement);
2124                 let msghash = hash_to_message!(&Sha256dHash::hash(&unsigned_announcement.encode()[..])[..]);
2125                 ChannelAnnouncement {
2126                         node_signature_1: secp_ctx.sign_ecdsa(&msghash, node_1_key),
2127                         node_signature_2: secp_ctx.sign_ecdsa(&msghash, node_2_key),
2128                         bitcoin_signature_1: secp_ctx.sign_ecdsa(&msghash, node_1_btckey),
2129                         bitcoin_signature_2: secp_ctx.sign_ecdsa(&msghash, node_2_btckey),
2130                         contents: unsigned_announcement,
2131                 }
2132         }
2133
2134         pub(crate) fn get_channel_script(secp_ctx: &Secp256k1<secp256k1::All>) -> Script {
2135                 let node_1_btckey = SecretKey::from_slice(&[40; 32]).unwrap();
2136                 let node_2_btckey = SecretKey::from_slice(&[39; 32]).unwrap();
2137                 make_funding_redeemscript(&PublicKey::from_secret_key(secp_ctx, &node_1_btckey),
2138                         &PublicKey::from_secret_key(secp_ctx, &node_2_btckey)).to_v0_p2wsh()
2139         }
2140
2141         pub(crate) fn get_signed_channel_update<F: Fn(&mut UnsignedChannelUpdate)>(f: F, node_key: &SecretKey, secp_ctx: &Secp256k1<secp256k1::All>) -> ChannelUpdate {
2142                 let mut unsigned_channel_update = UnsignedChannelUpdate {
2143                         chain_hash: genesis_block(Network::Testnet).header.block_hash(),
2144                         short_channel_id: 0,
2145                         timestamp: 100,
2146                         flags: 0,
2147                         cltv_expiry_delta: 144,
2148                         htlc_minimum_msat: 1_000_000,
2149                         htlc_maximum_msat: 1_000_000,
2150                         fee_base_msat: 10_000,
2151                         fee_proportional_millionths: 20,
2152                         excess_data: Vec::new()
2153                 };
2154                 f(&mut unsigned_channel_update);
2155                 let msghash = hash_to_message!(&Sha256dHash::hash(&unsigned_channel_update.encode()[..])[..]);
2156                 ChannelUpdate {
2157                         signature: secp_ctx.sign_ecdsa(&msghash, node_key),
2158                         contents: unsigned_channel_update
2159                 }
2160         }
2161
2162         #[test]
2163         fn handling_node_announcements() {
2164                 let network_graph = create_network_graph();
2165                 let (secp_ctx, gossip_sync) = create_gossip_sync(&network_graph);
2166
2167                 let node_1_privkey = &SecretKey::from_slice(&[42; 32]).unwrap();
2168                 let node_2_privkey = &SecretKey::from_slice(&[41; 32]).unwrap();
2169                 let zero_hash = Sha256dHash::hash(&[0; 32]);
2170
2171                 let valid_announcement = get_signed_node_announcement(|_| {}, node_1_privkey, &secp_ctx);
2172                 match gossip_sync.handle_node_announcement(&valid_announcement) {
2173                         Ok(_) => panic!(),
2174                         Err(e) => assert_eq!("No existing channels for node_announcement", e.err)
2175                 };
2176
2177                 {
2178                         // Announce a channel to add a corresponding node.
2179                         let valid_announcement = get_signed_channel_announcement(|_| {}, node_1_privkey, node_2_privkey, &secp_ctx);
2180                         match gossip_sync.handle_channel_announcement(&valid_announcement) {
2181                                 Ok(res) => assert!(res),
2182                                 _ => panic!()
2183                         };
2184                 }
2185
2186                 match gossip_sync.handle_node_announcement(&valid_announcement) {
2187                         Ok(res) => assert!(res),
2188                         Err(_) => panic!()
2189                 };
2190
2191                 let fake_msghash = hash_to_message!(&zero_hash);
2192                 match gossip_sync.handle_node_announcement(
2193                         &NodeAnnouncement {
2194                                 signature: secp_ctx.sign_ecdsa(&fake_msghash, node_1_privkey),
2195                                 contents: valid_announcement.contents.clone()
2196                 }) {
2197                         Ok(_) => panic!(),
2198                         Err(e) => assert_eq!(e.err, "Invalid signature on node_announcement message")
2199                 };
2200
2201                 let announcement_with_data = get_signed_node_announcement(|unsigned_announcement| {
2202                         unsigned_announcement.timestamp += 1000;
2203                         unsigned_announcement.excess_data.resize(MAX_EXCESS_BYTES_FOR_RELAY + 1, 0);
2204                 }, node_1_privkey, &secp_ctx);
2205                 // Return false because contains excess data.
2206                 match gossip_sync.handle_node_announcement(&announcement_with_data) {
2207                         Ok(res) => assert!(!res),
2208                         Err(_) => panic!()
2209                 };
2210
2211                 // Even though previous announcement was not relayed further, we still accepted it,
2212                 // so we now won't accept announcements before the previous one.
2213                 let outdated_announcement = get_signed_node_announcement(|unsigned_announcement| {
2214                         unsigned_announcement.timestamp += 1000 - 10;
2215                 }, node_1_privkey, &secp_ctx);
2216                 match gossip_sync.handle_node_announcement(&outdated_announcement) {
2217                         Ok(_) => panic!(),
2218                         Err(e) => assert_eq!(e.err, "Update older than last processed update")
2219                 };
2220         }
2221
2222         #[test]
2223         fn handling_channel_announcements() {
2224                 let secp_ctx = Secp256k1::new();
2225                 let logger = test_utils::TestLogger::new();
2226
2227                 let node_1_privkey = &SecretKey::from_slice(&[42; 32]).unwrap();
2228                 let node_2_privkey = &SecretKey::from_slice(&[41; 32]).unwrap();
2229
2230                 let good_script = get_channel_script(&secp_ctx);
2231                 let valid_announcement = get_signed_channel_announcement(|_| {}, node_1_privkey, node_2_privkey, &secp_ctx);
2232
2233                 // Test if the UTXO lookups were not supported
2234                 let network_graph = NetworkGraph::new(Network::Testnet, &logger);
2235                 let mut gossip_sync = P2PGossipSync::new(&network_graph, None, &logger);
2236                 match gossip_sync.handle_channel_announcement(&valid_announcement) {
2237                         Ok(res) => assert!(res),
2238                         _ => panic!()
2239                 };
2240
2241                 {
2242                         match network_graph.read_only().channels().get(&valid_announcement.contents.short_channel_id) {
2243                                 None => panic!(),
2244                                 Some(_) => ()
2245                         };
2246                 }
2247
2248                 // If we receive announcement for the same channel (with UTXO lookups disabled),
2249                 // drop new one on the floor, since we can't see any changes.
2250                 match gossip_sync.handle_channel_announcement(&valid_announcement) {
2251                         Ok(_) => panic!(),
2252                         Err(e) => assert_eq!(e.err, "Already have non-chain-validated channel")
2253                 };
2254
2255                 // Test if an associated transaction were not on-chain (or not confirmed).
2256                 let chain_source = test_utils::TestChainSource::new(Network::Testnet);
2257                 *chain_source.utxo_ret.lock().unwrap() = UtxoResult::Sync(Err(UtxoLookupError::UnknownTx));
2258                 let network_graph = NetworkGraph::new(Network::Testnet, &logger);
2259                 gossip_sync = P2PGossipSync::new(&network_graph, Some(&chain_source), &logger);
2260
2261                 let valid_announcement = get_signed_channel_announcement(|unsigned_announcement| {
2262                         unsigned_announcement.short_channel_id += 1;
2263                 }, node_1_privkey, node_2_privkey, &secp_ctx);
2264                 match gossip_sync.handle_channel_announcement(&valid_announcement) {
2265                         Ok(_) => panic!(),
2266                         Err(e) => assert_eq!(e.err, "Channel announced without corresponding UTXO entry")
2267                 };
2268
2269                 // Now test if the transaction is found in the UTXO set and the script is correct.
2270                 *chain_source.utxo_ret.lock().unwrap() =
2271                         UtxoResult::Sync(Ok(TxOut { value: 0, script_pubkey: good_script.clone() }));
2272                 let valid_announcement = get_signed_channel_announcement(|unsigned_announcement| {
2273                         unsigned_announcement.short_channel_id += 2;
2274                 }, node_1_privkey, node_2_privkey, &secp_ctx);
2275                 match gossip_sync.handle_channel_announcement(&valid_announcement) {
2276                         Ok(res) => assert!(res),
2277                         _ => panic!()
2278                 };
2279
2280                 {
2281                         match network_graph.read_only().channels().get(&valid_announcement.contents.short_channel_id) {
2282                                 None => panic!(),
2283                                 Some(_) => ()
2284                         };
2285                 }
2286
2287                 // If we receive announcement for the same channel, once we've validated it against the
2288                 // chain, we simply ignore all new (duplicate) announcements.
2289                 *chain_source.utxo_ret.lock().unwrap() =
2290                         UtxoResult::Sync(Ok(TxOut { value: 0, script_pubkey: good_script }));
2291                 match gossip_sync.handle_channel_announcement(&valid_announcement) {
2292                         Ok(_) => panic!(),
2293                         Err(e) => assert_eq!(e.err, "Already have chain-validated channel")
2294                 };
2295
2296                 #[cfg(feature = "std")]
2297                 {
2298                         use std::time::{SystemTime, UNIX_EPOCH};
2299
2300                         let tracking_time = SystemTime::now().duration_since(UNIX_EPOCH).expect("Time must be > 1970").as_secs();
2301                         // Mark a node as permanently failed so it's tracked as removed.
2302                         gossip_sync.network_graph().node_failed_permanent(&PublicKey::from_secret_key(&secp_ctx, node_1_privkey));
2303
2304                         // Return error and ignore valid channel announcement if one of the nodes has been tracked as removed.
2305                         let valid_announcement = get_signed_channel_announcement(|unsigned_announcement| {
2306                                 unsigned_announcement.short_channel_id += 3;
2307                         }, node_1_privkey, node_2_privkey, &secp_ctx);
2308                         match gossip_sync.handle_channel_announcement(&valid_announcement) {
2309                                 Ok(_) => panic!(),
2310                                 Err(e) => assert_eq!(e.err, "Channel with SCID 3 or one of its nodes was removed from our network graph recently")
2311                         }
2312
2313                         gossip_sync.network_graph().remove_stale_channels_and_tracking_with_time(tracking_time + REMOVED_ENTRIES_TRACKING_AGE_LIMIT_SECS);
2314
2315                         // The above channel announcement should be handled as per normal now.
2316                         match gossip_sync.handle_channel_announcement(&valid_announcement) {
2317                                 Ok(res) => assert!(res),
2318                                 _ => panic!()
2319                         }
2320                 }
2321
2322                 // Don't relay valid channels with excess data
2323                 let valid_announcement = get_signed_channel_announcement(|unsigned_announcement| {
2324                         unsigned_announcement.short_channel_id += 4;
2325                         unsigned_announcement.excess_data.resize(MAX_EXCESS_BYTES_FOR_RELAY + 1, 0);
2326                 }, node_1_privkey, node_2_privkey, &secp_ctx);
2327                 match gossip_sync.handle_channel_announcement(&valid_announcement) {
2328                         Ok(res) => assert!(!res),
2329                         _ => panic!()
2330                 };
2331
2332                 let mut invalid_sig_announcement = valid_announcement.clone();
2333                 invalid_sig_announcement.contents.excess_data = Vec::new();
2334                 match gossip_sync.handle_channel_announcement(&invalid_sig_announcement) {
2335                         Ok(_) => panic!(),
2336                         Err(e) => assert_eq!(e.err, "Invalid signature on channel_announcement message")
2337                 };
2338
2339                 let channel_to_itself_announcement = get_signed_channel_announcement(|_| {}, node_1_privkey, node_1_privkey, &secp_ctx);
2340                 match gossip_sync.handle_channel_announcement(&channel_to_itself_announcement) {
2341                         Ok(_) => panic!(),
2342                         Err(e) => assert_eq!(e.err, "Channel announcement node had a channel with itself")
2343                 };
2344
2345                 // Test that channel announcements with the wrong chain hash are ignored (network graph is testnet,
2346                 // announcement is mainnet).
2347                 let incorrect_chain_announcement = get_signed_channel_announcement(|unsigned_announcement| {
2348                         unsigned_announcement.chain_hash = genesis_block(Network::Bitcoin).header.block_hash();
2349                 }, node_1_privkey, node_2_privkey, &secp_ctx);
2350                 match gossip_sync.handle_channel_announcement(&incorrect_chain_announcement) {
2351                         Ok(_) => panic!(),
2352                         Err(e) => assert_eq!(e.err, "Channel announcement chain hash does not match genesis hash")
2353                 };
2354         }
2355
2356         #[test]
2357         fn handling_channel_update() {
2358                 let secp_ctx = Secp256k1::new();
2359                 let logger = test_utils::TestLogger::new();
2360                 let chain_source = test_utils::TestChainSource::new(Network::Testnet);
2361                 let network_graph = NetworkGraph::new(Network::Testnet, &logger);
2362                 let gossip_sync = P2PGossipSync::new(&network_graph, Some(&chain_source), &logger);
2363
2364                 let node_1_privkey = &SecretKey::from_slice(&[42; 32]).unwrap();
2365                 let node_2_privkey = &SecretKey::from_slice(&[41; 32]).unwrap();
2366
2367                 let amount_sats = 1000_000;
2368                 let short_channel_id;
2369
2370                 {
2371                         // Announce a channel we will update
2372                         let good_script = get_channel_script(&secp_ctx);
2373                         *chain_source.utxo_ret.lock().unwrap() =
2374                                 UtxoResult::Sync(Ok(TxOut { value: amount_sats, script_pubkey: good_script.clone() }));
2375
2376                         let valid_channel_announcement = get_signed_channel_announcement(|_| {}, node_1_privkey, node_2_privkey, &secp_ctx);
2377                         short_channel_id = valid_channel_announcement.contents.short_channel_id;
2378                         match gossip_sync.handle_channel_announcement(&valid_channel_announcement) {
2379                                 Ok(_) => (),
2380                                 Err(_) => panic!()
2381                         };
2382
2383                 }
2384
2385                 let valid_channel_update = get_signed_channel_update(|_| {}, node_1_privkey, &secp_ctx);
2386                 match gossip_sync.handle_channel_update(&valid_channel_update) {
2387                         Ok(res) => assert!(res),
2388                         _ => panic!(),
2389                 };
2390
2391                 {
2392                         match network_graph.read_only().channels().get(&short_channel_id) {
2393                                 None => panic!(),
2394                                 Some(channel_info) => {
2395                                         assert_eq!(channel_info.one_to_two.as_ref().unwrap().cltv_expiry_delta, 144);
2396                                         assert!(channel_info.two_to_one.is_none());
2397                                 }
2398                         };
2399                 }
2400
2401                 let valid_channel_update = get_signed_channel_update(|unsigned_channel_update| {
2402                         unsigned_channel_update.timestamp += 100;
2403                         unsigned_channel_update.excess_data.resize(MAX_EXCESS_BYTES_FOR_RELAY + 1, 0);
2404                 }, node_1_privkey, &secp_ctx);
2405                 // Return false because contains excess data
2406                 match gossip_sync.handle_channel_update(&valid_channel_update) {
2407                         Ok(res) => assert!(!res),
2408                         _ => panic!()
2409                 };
2410
2411                 let valid_channel_update = get_signed_channel_update(|unsigned_channel_update| {
2412                         unsigned_channel_update.timestamp += 110;
2413                         unsigned_channel_update.short_channel_id += 1;
2414                 }, node_1_privkey, &secp_ctx);
2415                 match gossip_sync.handle_channel_update(&valid_channel_update) {
2416                         Ok(_) => panic!(),
2417                         Err(e) => assert_eq!(e.err, "Couldn't find channel for update")
2418                 };
2419
2420                 let valid_channel_update = get_signed_channel_update(|unsigned_channel_update| {
2421                         unsigned_channel_update.htlc_maximum_msat = MAX_VALUE_MSAT + 1;
2422                         unsigned_channel_update.timestamp += 110;
2423                 }, node_1_privkey, &secp_ctx);
2424                 match gossip_sync.handle_channel_update(&valid_channel_update) {
2425                         Ok(_) => panic!(),
2426                         Err(e) => assert_eq!(e.err, "htlc_maximum_msat is larger than maximum possible msats")
2427                 };
2428
2429                 let valid_channel_update = get_signed_channel_update(|unsigned_channel_update| {
2430                         unsigned_channel_update.htlc_maximum_msat = amount_sats * 1000 + 1;
2431                         unsigned_channel_update.timestamp += 110;
2432                 }, node_1_privkey, &secp_ctx);
2433                 match gossip_sync.handle_channel_update(&valid_channel_update) {
2434                         Ok(_) => panic!(),
2435                         Err(e) => assert_eq!(e.err, "htlc_maximum_msat is larger than channel capacity or capacity is bogus")
2436                 };
2437
2438                 // Even though previous update was not relayed further, we still accepted it,
2439                 // so we now won't accept update before the previous one.
2440                 let valid_channel_update = get_signed_channel_update(|unsigned_channel_update| {
2441                         unsigned_channel_update.timestamp += 100;
2442                 }, node_1_privkey, &secp_ctx);
2443                 match gossip_sync.handle_channel_update(&valid_channel_update) {
2444                         Ok(_) => panic!(),
2445                         Err(e) => assert_eq!(e.err, "Update had same timestamp as last processed update")
2446                 };
2447
2448                 let mut invalid_sig_channel_update = get_signed_channel_update(|unsigned_channel_update| {
2449                         unsigned_channel_update.timestamp += 500;
2450                 }, node_1_privkey, &secp_ctx);
2451                 let zero_hash = Sha256dHash::hash(&[0; 32]);
2452                 let fake_msghash = hash_to_message!(&zero_hash);
2453                 invalid_sig_channel_update.signature = secp_ctx.sign_ecdsa(&fake_msghash, node_1_privkey);
2454                 match gossip_sync.handle_channel_update(&invalid_sig_channel_update) {
2455                         Ok(_) => panic!(),
2456                         Err(e) => assert_eq!(e.err, "Invalid signature on channel_update message")
2457                 };
2458
2459                 // Test that channel updates with the wrong chain hash are ignored (network graph is testnet, channel
2460                 // update is mainet).
2461                 let incorrect_chain_update = get_signed_channel_update(|unsigned_channel_update| {
2462                         unsigned_channel_update.chain_hash = genesis_block(Network::Bitcoin).header.block_hash();
2463                 }, node_1_privkey, &secp_ctx);
2464
2465                 match gossip_sync.handle_channel_update(&incorrect_chain_update) {
2466                         Ok(_) => panic!(),
2467                         Err(e) => assert_eq!(e.err, "Channel update chain hash does not match genesis hash")
2468                 };
2469         }
2470
2471         #[test]
2472         fn handling_network_update() {
2473                 let logger = test_utils::TestLogger::new();
2474                 let network_graph = NetworkGraph::new(Network::Testnet, &logger);
2475                 let secp_ctx = Secp256k1::new();
2476
2477                 let node_1_privkey = &SecretKey::from_slice(&[42; 32]).unwrap();
2478                 let node_2_privkey = &SecretKey::from_slice(&[41; 32]).unwrap();
2479                 let node_2_id = PublicKey::from_secret_key(&secp_ctx, node_2_privkey);
2480
2481                 {
2482                         // There is no nodes in the table at the beginning.
2483                         assert_eq!(network_graph.read_only().nodes().len(), 0);
2484                 }
2485
2486                 let short_channel_id;
2487                 {
2488                         // Announce a channel we will update
2489                         let valid_channel_announcement = get_signed_channel_announcement(|_| {}, node_1_privkey, node_2_privkey, &secp_ctx);
2490                         short_channel_id = valid_channel_announcement.contents.short_channel_id;
2491                         let chain_source: Option<&test_utils::TestChainSource> = None;
2492                         assert!(network_graph.update_channel_from_announcement(&valid_channel_announcement, &chain_source).is_ok());
2493                         assert!(network_graph.read_only().channels().get(&short_channel_id).is_some());
2494
2495                         let valid_channel_update = get_signed_channel_update(|_| {}, node_1_privkey, &secp_ctx);
2496                         assert!(network_graph.read_only().channels().get(&short_channel_id).unwrap().one_to_two.is_none());
2497
2498                         network_graph.handle_network_update(&NetworkUpdate::ChannelUpdateMessage {
2499                                 msg: valid_channel_update,
2500                         });
2501
2502                         assert!(network_graph.read_only().channels().get(&short_channel_id).unwrap().one_to_two.is_some());
2503                 }
2504
2505                 // Non-permanent failure doesn't touch the channel at all
2506                 {
2507                         match network_graph.read_only().channels().get(&short_channel_id) {
2508                                 None => panic!(),
2509                                 Some(channel_info) => {
2510                                         assert!(channel_info.one_to_two.as_ref().unwrap().enabled);
2511                                 }
2512                         };
2513
2514                         network_graph.handle_network_update(&NetworkUpdate::ChannelFailure {
2515                                 short_channel_id,
2516                                 is_permanent: false,
2517                         });
2518
2519                         match network_graph.read_only().channels().get(&short_channel_id) {
2520                                 None => panic!(),
2521                                 Some(channel_info) => {
2522                                         assert!(channel_info.one_to_two.as_ref().unwrap().enabled);
2523                                 }
2524                         };
2525                 }
2526
2527                 // Permanent closing deletes a channel
2528                 network_graph.handle_network_update(&NetworkUpdate::ChannelFailure {
2529                         short_channel_id,
2530                         is_permanent: true,
2531                 });
2532
2533                 assert_eq!(network_graph.read_only().channels().len(), 0);
2534                 // Nodes are also deleted because there are no associated channels anymore
2535                 assert_eq!(network_graph.read_only().nodes().len(), 0);
2536
2537                 {
2538                         // Get a new network graph since we don't want to track removed nodes in this test with "std"
2539                         let network_graph = NetworkGraph::new(Network::Testnet, &logger);
2540
2541                         // Announce a channel to test permanent node failure
2542                         let valid_channel_announcement = get_signed_channel_announcement(|_| {}, node_1_privkey, node_2_privkey, &secp_ctx);
2543                         let short_channel_id = valid_channel_announcement.contents.short_channel_id;
2544                         let chain_source: Option<&test_utils::TestChainSource> = None;
2545                         assert!(network_graph.update_channel_from_announcement(&valid_channel_announcement, &chain_source).is_ok());
2546                         assert!(network_graph.read_only().channels().get(&short_channel_id).is_some());
2547
2548                         // Non-permanent node failure does not delete any nodes or channels
2549                         network_graph.handle_network_update(&NetworkUpdate::NodeFailure {
2550                                 node_id: node_2_id,
2551                                 is_permanent: false,
2552                         });
2553
2554                         assert!(network_graph.read_only().channels().get(&short_channel_id).is_some());
2555                         assert!(network_graph.read_only().nodes().get(&NodeId::from_pubkey(&node_2_id)).is_some());
2556
2557                         // Permanent node failure deletes node and its channels
2558                         network_graph.handle_network_update(&NetworkUpdate::NodeFailure {
2559                                 node_id: node_2_id,
2560                                 is_permanent: true,
2561                         });
2562
2563                         assert_eq!(network_graph.read_only().nodes().len(), 0);
2564                         // Channels are also deleted because the associated node has been deleted
2565                         assert_eq!(network_graph.read_only().channels().len(), 0);
2566                 }
2567         }
2568
2569         #[test]
2570         fn test_channel_timeouts() {
2571                 // Test the removal of channels with `remove_stale_channels_and_tracking`.
2572                 let logger = test_utils::TestLogger::new();
2573                 let chain_source = test_utils::TestChainSource::new(Network::Testnet);
2574                 let network_graph = NetworkGraph::new(Network::Testnet, &logger);
2575                 let gossip_sync = P2PGossipSync::new(&network_graph, Some(&chain_source), &logger);
2576                 let secp_ctx = Secp256k1::new();
2577
2578                 let node_1_privkey = &SecretKey::from_slice(&[42; 32]).unwrap();
2579                 let node_2_privkey = &SecretKey::from_slice(&[41; 32]).unwrap();
2580
2581                 let valid_channel_announcement = get_signed_channel_announcement(|_| {}, node_1_privkey, node_2_privkey, &secp_ctx);
2582                 let short_channel_id = valid_channel_announcement.contents.short_channel_id;
2583                 let chain_source: Option<&test_utils::TestChainSource> = None;
2584                 assert!(network_graph.update_channel_from_announcement(&valid_channel_announcement, &chain_source).is_ok());
2585                 assert!(network_graph.read_only().channels().get(&short_channel_id).is_some());
2586
2587                 // Submit two channel updates for each channel direction (update.flags bit).
2588                 let valid_channel_update = get_signed_channel_update(|_| {}, node_1_privkey, &secp_ctx);
2589                 assert!(gossip_sync.handle_channel_update(&valid_channel_update).is_ok());
2590                 assert!(network_graph.read_only().channels().get(&short_channel_id).unwrap().one_to_two.is_some());
2591
2592                 let valid_channel_update_2 = get_signed_channel_update(|update| {update.flags |=1;}, node_2_privkey, &secp_ctx);
2593                 gossip_sync.handle_channel_update(&valid_channel_update_2).unwrap();
2594                 assert!(network_graph.read_only().channels().get(&short_channel_id).unwrap().two_to_one.is_some());
2595
2596                 network_graph.remove_stale_channels_and_tracking_with_time(100 + STALE_CHANNEL_UPDATE_AGE_LIMIT_SECS);
2597                 assert_eq!(network_graph.read_only().channels().len(), 1);
2598                 assert_eq!(network_graph.read_only().nodes().len(), 2);
2599
2600                 network_graph.remove_stale_channels_and_tracking_with_time(101 + STALE_CHANNEL_UPDATE_AGE_LIMIT_SECS);
2601                 #[cfg(not(feature = "std"))] {
2602                         // Make sure removed channels are tracked.
2603                         assert_eq!(network_graph.removed_channels.lock().unwrap().len(), 1);
2604                 }
2605                 network_graph.remove_stale_channels_and_tracking_with_time(101 + STALE_CHANNEL_UPDATE_AGE_LIMIT_SECS +
2606                         REMOVED_ENTRIES_TRACKING_AGE_LIMIT_SECS);
2607
2608                 #[cfg(feature = "std")]
2609                 {
2610                         // In std mode, a further check is performed before fully removing the channel -
2611                         // the channel_announcement must have been received at least two weeks ago. We
2612                         // fudge that here by indicating the time has jumped two weeks.
2613                         assert_eq!(network_graph.read_only().channels().len(), 1);
2614                         assert_eq!(network_graph.read_only().nodes().len(), 2);
2615
2616                         // Note that the directional channel information will have been removed already..
2617                         // We want to check that this will work even if *one* of the channel updates is recent,
2618                         // so we should add it with a recent timestamp.
2619                         assert!(network_graph.read_only().channels().get(&short_channel_id).unwrap().one_to_two.is_none());
2620                         use std::time::{SystemTime, UNIX_EPOCH};
2621                         let announcement_time = SystemTime::now().duration_since(UNIX_EPOCH).expect("Time must be > 1970").as_secs();
2622                         let valid_channel_update = get_signed_channel_update(|unsigned_channel_update| {
2623                                 unsigned_channel_update.timestamp = (announcement_time + 1 + STALE_CHANNEL_UPDATE_AGE_LIMIT_SECS) as u32;
2624                         }, node_1_privkey, &secp_ctx);
2625                         assert!(gossip_sync.handle_channel_update(&valid_channel_update).is_ok());
2626                         assert!(network_graph.read_only().channels().get(&short_channel_id).unwrap().one_to_two.is_some());
2627                         network_graph.remove_stale_channels_and_tracking_with_time(announcement_time + 1 + STALE_CHANNEL_UPDATE_AGE_LIMIT_SECS);
2628                         // Make sure removed channels are tracked.
2629                         assert_eq!(network_graph.removed_channels.lock().unwrap().len(), 1);
2630                         // Provide a later time so that sufficient time has passed
2631                         network_graph.remove_stale_channels_and_tracking_with_time(announcement_time + 1 + STALE_CHANNEL_UPDATE_AGE_LIMIT_SECS +
2632                                 REMOVED_ENTRIES_TRACKING_AGE_LIMIT_SECS);
2633                 }
2634
2635                 assert_eq!(network_graph.read_only().channels().len(), 0);
2636                 assert_eq!(network_graph.read_only().nodes().len(), 0);
2637                 assert!(network_graph.removed_channels.lock().unwrap().is_empty());
2638
2639                 #[cfg(feature = "std")]
2640                 {
2641                         use std::time::{SystemTime, UNIX_EPOCH};
2642
2643                         let tracking_time = SystemTime::now().duration_since(UNIX_EPOCH).expect("Time must be > 1970").as_secs();
2644
2645                         // Clear tracked nodes and channels for clean slate
2646                         network_graph.removed_channels.lock().unwrap().clear();
2647                         network_graph.removed_nodes.lock().unwrap().clear();
2648
2649                         // Add a channel and nodes from channel announcement. So our network graph will
2650                         // now only consist of two nodes and one channel between them.
2651                         assert!(network_graph.update_channel_from_announcement(
2652                                 &valid_channel_announcement, &chain_source).is_ok());
2653
2654                         // Mark the channel as permanently failed. This will also remove the two nodes
2655                         // and all of the entries will be tracked as removed.
2656                         network_graph.channel_failed_permanent_with_time(short_channel_id, Some(tracking_time));
2657
2658                         // Should not remove from tracking if insufficient time has passed
2659                         network_graph.remove_stale_channels_and_tracking_with_time(
2660                                 tracking_time + REMOVED_ENTRIES_TRACKING_AGE_LIMIT_SECS - 1);
2661                         assert_eq!(network_graph.removed_channels.lock().unwrap().len(), 1, "Removed channel count â‰  1 with tracking_time {}", tracking_time);
2662
2663                         // Provide a later time so that sufficient time has passed
2664                         network_graph.remove_stale_channels_and_tracking_with_time(
2665                                 tracking_time + REMOVED_ENTRIES_TRACKING_AGE_LIMIT_SECS);
2666                         assert!(network_graph.removed_channels.lock().unwrap().is_empty(), "Unexpectedly removed channels with tracking_time {}", tracking_time);
2667                         assert!(network_graph.removed_nodes.lock().unwrap().is_empty(), "Unexpectedly removed nodes with tracking_time {}", tracking_time);
2668                 }
2669
2670                 #[cfg(not(feature = "std"))]
2671                 {
2672                         // When we don't have access to the system clock, the time we started tracking removal will only
2673                         // be that provided by the first call to `remove_stale_channels_and_tracking_with_time`. Hence,
2674                         // only if sufficient time has passed after that first call, will the next call remove it from
2675                         // tracking.
2676                         let removal_time = 1664619654;
2677
2678                         // Clear removed nodes and channels for clean slate
2679                         network_graph.removed_channels.lock().unwrap().clear();
2680                         network_graph.removed_nodes.lock().unwrap().clear();
2681
2682                         // Add a channel and nodes from channel announcement. So our network graph will
2683                         // now only consist of two nodes and one channel between them.
2684                         assert!(network_graph.update_channel_from_announcement(
2685                                 &valid_channel_announcement, &chain_source).is_ok());
2686
2687                         // Mark the channel as permanently failed. This will also remove the two nodes
2688                         // and all of the entries will be tracked as removed.
2689                         network_graph.channel_failed_permanent(short_channel_id);
2690
2691                         // The first time we call the following, the channel will have a removal time assigned.
2692                         network_graph.remove_stale_channels_and_tracking_with_time(removal_time);
2693                         assert_eq!(network_graph.removed_channels.lock().unwrap().len(), 1);
2694
2695                         // Provide a later time so that sufficient time has passed
2696                         network_graph.remove_stale_channels_and_tracking_with_time(
2697                                 removal_time + REMOVED_ENTRIES_TRACKING_AGE_LIMIT_SECS);
2698                         assert!(network_graph.removed_channels.lock().unwrap().is_empty());
2699                         assert!(network_graph.removed_nodes.lock().unwrap().is_empty());
2700                 }
2701         }
2702
2703         #[test]
2704         fn getting_next_channel_announcements() {
2705                 let network_graph = create_network_graph();
2706                 let (secp_ctx, gossip_sync) = create_gossip_sync(&network_graph);
2707                 let node_1_privkey = &SecretKey::from_slice(&[42; 32]).unwrap();
2708                 let node_2_privkey = &SecretKey::from_slice(&[41; 32]).unwrap();
2709
2710                 // Channels were not announced yet.
2711                 let channels_with_announcements = gossip_sync.get_next_channel_announcement(0);
2712                 assert!(channels_with_announcements.is_none());
2713
2714                 let short_channel_id;
2715                 {
2716                         // Announce a channel we will update
2717                         let valid_channel_announcement = get_signed_channel_announcement(|_| {}, node_1_privkey, node_2_privkey, &secp_ctx);
2718                         short_channel_id = valid_channel_announcement.contents.short_channel_id;
2719                         match gossip_sync.handle_channel_announcement(&valid_channel_announcement) {
2720                                 Ok(_) => (),
2721                                 Err(_) => panic!()
2722                         };
2723                 }
2724
2725                 // Contains initial channel announcement now.
2726                 let channels_with_announcements = gossip_sync.get_next_channel_announcement(short_channel_id);
2727                 if let Some(channel_announcements) = channels_with_announcements {
2728                         let (_, ref update_1, ref update_2) = channel_announcements;
2729                         assert_eq!(update_1, &None);
2730                         assert_eq!(update_2, &None);
2731                 } else {
2732                         panic!();
2733                 }
2734
2735                 {
2736                         // Valid channel update
2737                         let valid_channel_update = get_signed_channel_update(|unsigned_channel_update| {
2738                                 unsigned_channel_update.timestamp = 101;
2739                         }, node_1_privkey, &secp_ctx);
2740                         match gossip_sync.handle_channel_update(&valid_channel_update) {
2741                                 Ok(_) => (),
2742                                 Err(_) => panic!()
2743                         };
2744                 }
2745
2746                 // Now contains an initial announcement and an update.
2747                 let channels_with_announcements = gossip_sync.get_next_channel_announcement(short_channel_id);
2748                 if let Some(channel_announcements) = channels_with_announcements {
2749                         let (_, ref update_1, ref update_2) = channel_announcements;
2750                         assert_ne!(update_1, &None);
2751                         assert_eq!(update_2, &None);
2752                 } else {
2753                         panic!();
2754                 }
2755
2756                 {
2757                         // Channel update with excess data.
2758                         let valid_channel_update = get_signed_channel_update(|unsigned_channel_update| {
2759                                 unsigned_channel_update.timestamp = 102;
2760                                 unsigned_channel_update.excess_data = [1; MAX_EXCESS_BYTES_FOR_RELAY + 1].to_vec();
2761                         }, node_1_privkey, &secp_ctx);
2762                         match gossip_sync.handle_channel_update(&valid_channel_update) {
2763                                 Ok(_) => (),
2764                                 Err(_) => panic!()
2765                         };
2766                 }
2767
2768                 // Test that announcements with excess data won't be returned
2769                 let channels_with_announcements = gossip_sync.get_next_channel_announcement(short_channel_id);
2770                 if let Some(channel_announcements) = channels_with_announcements {
2771                         let (_, ref update_1, ref update_2) = channel_announcements;
2772                         assert_eq!(update_1, &None);
2773                         assert_eq!(update_2, &None);
2774                 } else {
2775                         panic!();
2776                 }
2777
2778                 // Further starting point have no channels after it
2779                 let channels_with_announcements = gossip_sync.get_next_channel_announcement(short_channel_id + 1000);
2780                 assert!(channels_with_announcements.is_none());
2781         }
2782
2783         #[test]
2784         fn getting_next_node_announcements() {
2785                 let network_graph = create_network_graph();
2786                 let (secp_ctx, gossip_sync) = create_gossip_sync(&network_graph);
2787                 let node_1_privkey = &SecretKey::from_slice(&[42; 32]).unwrap();
2788                 let node_2_privkey = &SecretKey::from_slice(&[41; 32]).unwrap();
2789                 let node_id_1 = NodeId::from_pubkey(&PublicKey::from_secret_key(&secp_ctx, node_1_privkey));
2790
2791                 // No nodes yet.
2792                 let next_announcements = gossip_sync.get_next_node_announcement(None);
2793                 assert!(next_announcements.is_none());
2794
2795                 {
2796                         // Announce a channel to add 2 nodes
2797                         let valid_channel_announcement = get_signed_channel_announcement(|_| {}, node_1_privkey, node_2_privkey, &secp_ctx);
2798                         match gossip_sync.handle_channel_announcement(&valid_channel_announcement) {
2799                                 Ok(_) => (),
2800                                 Err(_) => panic!()
2801                         };
2802                 }
2803
2804                 // Nodes were never announced
2805                 let next_announcements = gossip_sync.get_next_node_announcement(None);
2806                 assert!(next_announcements.is_none());
2807
2808                 {
2809                         let valid_announcement = get_signed_node_announcement(|_| {}, node_1_privkey, &secp_ctx);
2810                         match gossip_sync.handle_node_announcement(&valid_announcement) {
2811                                 Ok(_) => (),
2812                                 Err(_) => panic!()
2813                         };
2814
2815                         let valid_announcement = get_signed_node_announcement(|_| {}, node_2_privkey, &secp_ctx);
2816                         match gossip_sync.handle_node_announcement(&valid_announcement) {
2817                                 Ok(_) => (),
2818                                 Err(_) => panic!()
2819                         };
2820                 }
2821
2822                 let next_announcements = gossip_sync.get_next_node_announcement(None);
2823                 assert!(next_announcements.is_some());
2824
2825                 // Skip the first node.
2826                 let next_announcements = gossip_sync.get_next_node_announcement(Some(&node_id_1));
2827                 assert!(next_announcements.is_some());
2828
2829                 {
2830                         // Later announcement which should not be relayed (excess data) prevent us from sharing a node
2831                         let valid_announcement = get_signed_node_announcement(|unsigned_announcement| {
2832                                 unsigned_announcement.timestamp += 10;
2833                                 unsigned_announcement.excess_data = [1; MAX_EXCESS_BYTES_FOR_RELAY + 1].to_vec();
2834                         }, node_2_privkey, &secp_ctx);
2835                         match gossip_sync.handle_node_announcement(&valid_announcement) {
2836                                 Ok(res) => assert!(!res),
2837                                 Err(_) => panic!()
2838                         };
2839                 }
2840
2841                 let next_announcements = gossip_sync.get_next_node_announcement(Some(&node_id_1));
2842                 assert!(next_announcements.is_none());
2843         }
2844
2845         #[test]
2846         fn network_graph_serialization() {
2847                 let network_graph = create_network_graph();
2848                 let (secp_ctx, gossip_sync) = create_gossip_sync(&network_graph);
2849
2850                 let node_1_privkey = &SecretKey::from_slice(&[42; 32]).unwrap();
2851                 let node_2_privkey = &SecretKey::from_slice(&[41; 32]).unwrap();
2852
2853                 // Announce a channel to add a corresponding node.
2854                 let valid_announcement = get_signed_channel_announcement(|_| {}, node_1_privkey, node_2_privkey, &secp_ctx);
2855                 match gossip_sync.handle_channel_announcement(&valid_announcement) {
2856                         Ok(res) => assert!(res),
2857                         _ => panic!()
2858                 };
2859
2860                 let valid_announcement = get_signed_node_announcement(|_| {}, node_1_privkey, &secp_ctx);
2861                 match gossip_sync.handle_node_announcement(&valid_announcement) {
2862                         Ok(_) => (),
2863                         Err(_) => panic!()
2864                 };
2865
2866                 let mut w = test_utils::TestVecWriter(Vec::new());
2867                 assert!(!network_graph.read_only().nodes().is_empty());
2868                 assert!(!network_graph.read_only().channels().is_empty());
2869                 network_graph.write(&mut w).unwrap();
2870
2871                 let logger = Arc::new(test_utils::TestLogger::new());
2872                 assert!(<NetworkGraph<_>>::read(&mut io::Cursor::new(&w.0), logger).unwrap() == network_graph);
2873         }
2874
2875         #[test]
2876         fn network_graph_tlv_serialization() {
2877                 let network_graph = create_network_graph();
2878                 network_graph.set_last_rapid_gossip_sync_timestamp(42);
2879
2880                 let mut w = test_utils::TestVecWriter(Vec::new());
2881                 network_graph.write(&mut w).unwrap();
2882
2883                 let logger = Arc::new(test_utils::TestLogger::new());
2884                 let reassembled_network_graph: NetworkGraph<_> = ReadableArgs::read(&mut io::Cursor::new(&w.0), logger).unwrap();
2885                 assert!(reassembled_network_graph == network_graph);
2886                 assert_eq!(reassembled_network_graph.get_last_rapid_gossip_sync_timestamp().unwrap(), 42);
2887         }
2888
2889         #[test]
2890         #[cfg(feature = "std")]
2891         fn calling_sync_routing_table() {
2892                 use std::time::{SystemTime, UNIX_EPOCH};
2893                 use crate::ln::msgs::Init;
2894
2895                 let network_graph = create_network_graph();
2896                 let (secp_ctx, gossip_sync) = create_gossip_sync(&network_graph);
2897                 let node_privkey_1 = &SecretKey::from_slice(&[42; 32]).unwrap();
2898                 let node_id_1 = PublicKey::from_secret_key(&secp_ctx, node_privkey_1);
2899
2900                 let chain_hash = genesis_block(Network::Testnet).header.block_hash();
2901
2902                 // It should ignore if gossip_queries feature is not enabled
2903                 {
2904                         let init_msg = Init { features: InitFeatures::empty(), networks: None, remote_network_address: None };
2905                         gossip_sync.peer_connected(&node_id_1, &init_msg, true).unwrap();
2906                         let events = gossip_sync.get_and_clear_pending_msg_events();
2907                         assert_eq!(events.len(), 0);
2908                 }
2909
2910                 // It should send a gossip_timestamp_filter with the correct information
2911                 {
2912                         let mut features = InitFeatures::empty();
2913                         features.set_gossip_queries_optional();
2914                         let init_msg = Init { features, networks: None, remote_network_address: None };
2915                         gossip_sync.peer_connected(&node_id_1, &init_msg, true).unwrap();
2916                         let events = gossip_sync.get_and_clear_pending_msg_events();
2917                         assert_eq!(events.len(), 1);
2918                         match &events[0] {
2919                                 MessageSendEvent::SendGossipTimestampFilter{ node_id, msg } => {
2920                                         assert_eq!(node_id, &node_id_1);
2921                                         assert_eq!(msg.chain_hash, chain_hash);
2922                                         let expected_timestamp = SystemTime::now().duration_since(UNIX_EPOCH).expect("Time must be > 1970").as_secs();
2923                                         assert!((msg.first_timestamp as u64) >= expected_timestamp - 60*60*24*7*2);
2924                                         assert!((msg.first_timestamp as u64) < expected_timestamp - 60*60*24*7*2 + 10);
2925                                         assert_eq!(msg.timestamp_range, u32::max_value());
2926                                 },
2927                                 _ => panic!("Expected MessageSendEvent::SendChannelRangeQuery")
2928                         };
2929                 }
2930         }
2931
2932         #[test]
2933         fn handling_query_channel_range() {
2934                 let network_graph = create_network_graph();
2935                 let (secp_ctx, gossip_sync) = create_gossip_sync(&network_graph);
2936
2937                 let chain_hash = genesis_block(Network::Testnet).header.block_hash();
2938                 let node_1_privkey = &SecretKey::from_slice(&[42; 32]).unwrap();
2939                 let node_2_privkey = &SecretKey::from_slice(&[41; 32]).unwrap();
2940                 let node_id_2 = PublicKey::from_secret_key(&secp_ctx, node_2_privkey);
2941
2942                 let mut scids: Vec<u64> = vec![
2943                         scid_from_parts(0xfffffe, 0xffffff, 0xffff).unwrap(), // max
2944                         scid_from_parts(0xffffff, 0xffffff, 0xffff).unwrap(), // never
2945                 ];
2946
2947                 // used for testing multipart reply across blocks
2948                 for block in 100000..=108001 {
2949                         scids.push(scid_from_parts(block, 0, 0).unwrap());
2950                 }
2951
2952                 // used for testing resumption on same block
2953                 scids.push(scid_from_parts(108001, 1, 0).unwrap());
2954
2955                 for scid in scids {
2956                         let valid_announcement = get_signed_channel_announcement(|unsigned_announcement| {
2957                                 unsigned_announcement.short_channel_id = scid;
2958                         }, node_1_privkey, node_2_privkey, &secp_ctx);
2959                         match gossip_sync.handle_channel_announcement(&valid_announcement) {
2960                                 Ok(_) => (),
2961                                 _ => panic!()
2962                         };
2963                 }
2964
2965                 // Error when number_of_blocks=0
2966                 do_handling_query_channel_range(
2967                         &gossip_sync,
2968                         &node_id_2,
2969                         QueryChannelRange {
2970                                 chain_hash: chain_hash.clone(),
2971                                 first_blocknum: 0,
2972                                 number_of_blocks: 0,
2973                         },
2974                         false,
2975                         vec![ReplyChannelRange {
2976                                 chain_hash: chain_hash.clone(),
2977                                 first_blocknum: 0,
2978                                 number_of_blocks: 0,
2979                                 sync_complete: true,
2980                                 short_channel_ids: vec![]
2981                         }]
2982                 );
2983
2984                 // Error when wrong chain
2985                 do_handling_query_channel_range(
2986                         &gossip_sync,
2987                         &node_id_2,
2988                         QueryChannelRange {
2989                                 chain_hash: genesis_block(Network::Bitcoin).header.block_hash(),
2990                                 first_blocknum: 0,
2991                                 number_of_blocks: 0xffff_ffff,
2992                         },
2993                         false,
2994                         vec![ReplyChannelRange {
2995                                 chain_hash: genesis_block(Network::Bitcoin).header.block_hash(),
2996                                 first_blocknum: 0,
2997                                 number_of_blocks: 0xffff_ffff,
2998                                 sync_complete: true,
2999                                 short_channel_ids: vec![],
3000                         }]
3001                 );
3002
3003                 // Error when first_blocknum > 0xffffff
3004                 do_handling_query_channel_range(
3005                         &gossip_sync,
3006                         &node_id_2,
3007                         QueryChannelRange {
3008                                 chain_hash: chain_hash.clone(),
3009                                 first_blocknum: 0x01000000,
3010                                 number_of_blocks: 0xffff_ffff,
3011                         },
3012                         false,
3013                         vec![ReplyChannelRange {
3014                                 chain_hash: chain_hash.clone(),
3015                                 first_blocknum: 0x01000000,
3016                                 number_of_blocks: 0xffff_ffff,
3017                                 sync_complete: true,
3018                                 short_channel_ids: vec![]
3019                         }]
3020                 );
3021
3022                 // Empty reply when max valid SCID block num
3023                 do_handling_query_channel_range(
3024                         &gossip_sync,
3025                         &node_id_2,
3026                         QueryChannelRange {
3027                                 chain_hash: chain_hash.clone(),
3028                                 first_blocknum: 0xffffff,
3029                                 number_of_blocks: 1,
3030                         },
3031                         true,
3032                         vec![
3033                                 ReplyChannelRange {
3034                                         chain_hash: chain_hash.clone(),
3035                                         first_blocknum: 0xffffff,
3036                                         number_of_blocks: 1,
3037                                         sync_complete: true,
3038                                         short_channel_ids: vec![]
3039                                 },
3040                         ]
3041                 );
3042
3043                 // No results in valid query range
3044                 do_handling_query_channel_range(
3045                         &gossip_sync,
3046                         &node_id_2,
3047                         QueryChannelRange {
3048                                 chain_hash: chain_hash.clone(),
3049                                 first_blocknum: 1000,
3050                                 number_of_blocks: 1000,
3051                         },
3052                         true,
3053                         vec![
3054                                 ReplyChannelRange {
3055                                         chain_hash: chain_hash.clone(),
3056                                         first_blocknum: 1000,
3057                                         number_of_blocks: 1000,
3058                                         sync_complete: true,
3059                                         short_channel_ids: vec![],
3060                                 }
3061                         ]
3062                 );
3063
3064                 // Overflow first_blocknum + number_of_blocks
3065                 do_handling_query_channel_range(
3066                         &gossip_sync,
3067                         &node_id_2,
3068                         QueryChannelRange {
3069                                 chain_hash: chain_hash.clone(),
3070                                 first_blocknum: 0xfe0000,
3071                                 number_of_blocks: 0xffffffff,
3072                         },
3073                         true,
3074                         vec![
3075                                 ReplyChannelRange {
3076                                         chain_hash: chain_hash.clone(),
3077                                         first_blocknum: 0xfe0000,
3078                                         number_of_blocks: 0xffffffff - 0xfe0000,
3079                                         sync_complete: true,
3080                                         short_channel_ids: vec![
3081                                                 0xfffffe_ffffff_ffff, // max
3082                                         ]
3083                                 }
3084                         ]
3085                 );
3086
3087                 // Single block exactly full
3088                 do_handling_query_channel_range(
3089                         &gossip_sync,
3090                         &node_id_2,
3091                         QueryChannelRange {
3092                                 chain_hash: chain_hash.clone(),
3093                                 first_blocknum: 100000,
3094                                 number_of_blocks: 8000,
3095                         },
3096                         true,
3097                         vec![
3098                                 ReplyChannelRange {
3099                                         chain_hash: chain_hash.clone(),
3100                                         first_blocknum: 100000,
3101                                         number_of_blocks: 8000,
3102                                         sync_complete: true,
3103                                         short_channel_ids: (100000..=107999)
3104                                                 .map(|block| scid_from_parts(block, 0, 0).unwrap())
3105                                                 .collect(),
3106                                 },
3107                         ]
3108                 );
3109
3110                 // Multiple split on new block
3111                 do_handling_query_channel_range(
3112                         &gossip_sync,
3113                         &node_id_2,
3114                         QueryChannelRange {
3115                                 chain_hash: chain_hash.clone(),
3116                                 first_blocknum: 100000,
3117                                 number_of_blocks: 8001,
3118                         },
3119                         true,
3120                         vec![
3121                                 ReplyChannelRange {
3122                                         chain_hash: chain_hash.clone(),
3123                                         first_blocknum: 100000,
3124                                         number_of_blocks: 7999,
3125                                         sync_complete: false,
3126                                         short_channel_ids: (100000..=107999)
3127                                                 .map(|block| scid_from_parts(block, 0, 0).unwrap())
3128                                                 .collect(),
3129                                 },
3130                                 ReplyChannelRange {
3131                                         chain_hash: chain_hash.clone(),
3132                                         first_blocknum: 107999,
3133                                         number_of_blocks: 2,
3134                                         sync_complete: true,
3135                                         short_channel_ids: vec![
3136                                                 scid_from_parts(108000, 0, 0).unwrap(),
3137                                         ],
3138                                 }
3139                         ]
3140                 );
3141
3142                 // Multiple split on same block
3143                 do_handling_query_channel_range(
3144                         &gossip_sync,
3145                         &node_id_2,
3146                         QueryChannelRange {
3147                                 chain_hash: chain_hash.clone(),
3148                                 first_blocknum: 100002,
3149                                 number_of_blocks: 8000,
3150                         },
3151                         true,
3152                         vec![
3153                                 ReplyChannelRange {
3154                                         chain_hash: chain_hash.clone(),
3155                                         first_blocknum: 100002,
3156                                         number_of_blocks: 7999,
3157                                         sync_complete: false,
3158                                         short_channel_ids: (100002..=108001)
3159                                                 .map(|block| scid_from_parts(block, 0, 0).unwrap())
3160                                                 .collect(),
3161                                 },
3162                                 ReplyChannelRange {
3163                                         chain_hash: chain_hash.clone(),
3164                                         first_blocknum: 108001,
3165                                         number_of_blocks: 1,
3166                                         sync_complete: true,
3167                                         short_channel_ids: vec![
3168                                                 scid_from_parts(108001, 1, 0).unwrap(),
3169                                         ],
3170                                 }
3171                         ]
3172                 );
3173         }
3174
3175         fn do_handling_query_channel_range(
3176                 gossip_sync: &P2PGossipSync<&NetworkGraph<Arc<test_utils::TestLogger>>, Arc<test_utils::TestChainSource>, Arc<test_utils::TestLogger>>,
3177                 test_node_id: &PublicKey,
3178                 msg: QueryChannelRange,
3179                 expected_ok: bool,
3180                 expected_replies: Vec<ReplyChannelRange>
3181         ) {
3182                 let mut max_firstblocknum = msg.first_blocknum.saturating_sub(1);
3183                 let mut c_lightning_0_9_prev_end_blocknum = max_firstblocknum;
3184                 let query_end_blocknum = msg.end_blocknum();
3185                 let result = gossip_sync.handle_query_channel_range(test_node_id, msg);
3186
3187                 if expected_ok {
3188                         assert!(result.is_ok());
3189                 } else {
3190                         assert!(result.is_err());
3191                 }
3192
3193                 let events = gossip_sync.get_and_clear_pending_msg_events();
3194                 assert_eq!(events.len(), expected_replies.len());
3195
3196                 for i in 0..events.len() {
3197                         let expected_reply = &expected_replies[i];
3198                         match &events[i] {
3199                                 MessageSendEvent::SendReplyChannelRange { node_id, msg } => {
3200                                         assert_eq!(node_id, test_node_id);
3201                                         assert_eq!(msg.chain_hash, expected_reply.chain_hash);
3202                                         assert_eq!(msg.first_blocknum, expected_reply.first_blocknum);
3203                                         assert_eq!(msg.number_of_blocks, expected_reply.number_of_blocks);
3204                                         assert_eq!(msg.sync_complete, expected_reply.sync_complete);
3205                                         assert_eq!(msg.short_channel_ids, expected_reply.short_channel_ids);
3206
3207                                         // Enforce exactly the sequencing requirements present on c-lightning v0.9.3
3208                                         assert!(msg.first_blocknum == c_lightning_0_9_prev_end_blocknum || msg.first_blocknum == c_lightning_0_9_prev_end_blocknum.saturating_add(1));
3209                                         assert!(msg.first_blocknum >= max_firstblocknum);
3210                                         max_firstblocknum = msg.first_blocknum;
3211                                         c_lightning_0_9_prev_end_blocknum = msg.first_blocknum.saturating_add(msg.number_of_blocks);
3212
3213                                         // Check that the last block count is >= the query's end_blocknum
3214                                         if i == events.len() - 1 {
3215                                                 assert!(msg.first_blocknum.saturating_add(msg.number_of_blocks) >= query_end_blocknum);
3216                                         }
3217                                 },
3218                                 _ => panic!("expected MessageSendEvent::SendReplyChannelRange"),
3219                         }
3220                 }
3221         }
3222
3223         #[test]
3224         fn handling_query_short_channel_ids() {
3225                 let network_graph = create_network_graph();
3226                 let (secp_ctx, gossip_sync) = create_gossip_sync(&network_graph);
3227                 let node_privkey = &SecretKey::from_slice(&[41; 32]).unwrap();
3228                 let node_id = PublicKey::from_secret_key(&secp_ctx, node_privkey);
3229
3230                 let chain_hash = genesis_block(Network::Testnet).header.block_hash();
3231
3232                 let result = gossip_sync.handle_query_short_channel_ids(&node_id, QueryShortChannelIds {
3233                         chain_hash,
3234                         short_channel_ids: vec![0x0003e8_000000_0000],
3235                 });
3236                 assert!(result.is_err());
3237         }
3238
3239         #[test]
3240         fn displays_node_alias() {
3241                 let format_str_alias = |alias: &str| {
3242                         let mut bytes = [0u8; 32];
3243                         bytes[..alias.as_bytes().len()].copy_from_slice(alias.as_bytes());
3244                         format!("{}", NodeAlias(bytes))
3245                 };
3246
3247                 assert_eq!(format_str_alias("I\u{1F496}LDK! \u{26A1}"), "I\u{1F496}LDK! \u{26A1}");
3248                 assert_eq!(format_str_alias("I\u{1F496}LDK!\0\u{26A1}"), "I\u{1F496}LDK!");
3249                 assert_eq!(format_str_alias("I\u{1F496}LDK!\t\u{26A1}"), "I\u{1F496}LDK!\u{FFFD}\u{26A1}");
3250
3251                 let format_bytes_alias = |alias: &[u8]| {
3252                         let mut bytes = [0u8; 32];
3253                         bytes[..alias.len()].copy_from_slice(alias);
3254                         format!("{}", NodeAlias(bytes))
3255                 };
3256
3257                 assert_eq!(format_bytes_alias(b"\xFFI <heart> LDK!"), "\u{FFFD}I <heart> LDK!");
3258                 assert_eq!(format_bytes_alias(b"\xFFI <heart>\0LDK!"), "\u{FFFD}I <heart>");
3259                 assert_eq!(format_bytes_alias(b"\xFFI <heart>\tLDK!"), "\u{FFFD}I <heart>\u{FFFD}LDK!");
3260         }
3261
3262         #[test]
3263         fn channel_info_is_readable() {
3264                 let chanmon_cfgs = crate::ln::functional_test_utils::create_chanmon_cfgs(2);
3265                 let node_cfgs = crate::ln::functional_test_utils::create_node_cfgs(2, &chanmon_cfgs);
3266                 let node_chanmgrs = crate::ln::functional_test_utils::create_node_chanmgrs(2, &node_cfgs, &[None, None, None, None]);
3267                 let nodes = crate::ln::functional_test_utils::create_network(2, &node_cfgs, &node_chanmgrs);
3268                 let config = crate::ln::functional_test_utils::test_default_channel_config();
3269
3270                 // 1. Test encoding/decoding of ChannelUpdateInfo
3271                 let chan_update_info = ChannelUpdateInfo {
3272                         last_update: 23,
3273                         enabled: true,
3274                         cltv_expiry_delta: 42,
3275                         htlc_minimum_msat: 1234,
3276                         htlc_maximum_msat: 5678,
3277                         fees: RoutingFees { base_msat: 9, proportional_millionths: 10 },
3278                         last_update_message: None,
3279                 };
3280
3281                 let mut encoded_chan_update_info: Vec<u8> = Vec::new();
3282                 assert!(chan_update_info.write(&mut encoded_chan_update_info).is_ok());
3283
3284                 // First make sure we can read ChannelUpdateInfos we just wrote
3285                 let read_chan_update_info: ChannelUpdateInfo = crate::util::ser::Readable::read(&mut encoded_chan_update_info.as_slice()).unwrap();
3286                 assert_eq!(chan_update_info, read_chan_update_info);
3287
3288                 // Check the serialization hasn't changed.
3289                 let legacy_chan_update_info_with_some: Vec<u8> = hex::decode("340004000000170201010402002a060800000000000004d2080909000000000000162e0a0d0c00040000000902040000000a0c0100").unwrap();
3290                 assert_eq!(encoded_chan_update_info, legacy_chan_update_info_with_some);
3291
3292                 // Check we fail if htlc_maximum_msat is not present in either the ChannelUpdateInfo itself
3293                 // or the ChannelUpdate enclosed with `last_update_message`.
3294                 let legacy_chan_update_info_with_some_and_fail_update: Vec<u8> = hex::decode("b40004000000170201010402002a060800000000000004d2080909000000000000162e0a0d0c00040000000902040000000a0c8181d977cb9b53d93a6ff64bb5f1e158b4094b66e798fb12911168a3ccdf80a83096340a6a95da0ae8d9f776528eecdbb747eb6b545495a4319ed5378e35b21e073a000000000019d6689c085ae165831e934ff763ae46a2a6c172b3f1b60a8ce26f00083a840000034d013413a70000009000000000000f42400000271000000014").unwrap();
3295                 let read_chan_update_info_res: Result<ChannelUpdateInfo, crate::ln::msgs::DecodeError> = crate::util::ser::Readable::read(&mut legacy_chan_update_info_with_some_and_fail_update.as_slice());
3296                 assert!(read_chan_update_info_res.is_err());
3297
3298                 let legacy_chan_update_info_with_none: Vec<u8> = hex::decode("2c0004000000170201010402002a060800000000000004d20801000a0d0c00040000000902040000000a0c0100").unwrap();
3299                 let read_chan_update_info_res: Result<ChannelUpdateInfo, crate::ln::msgs::DecodeError> = crate::util::ser::Readable::read(&mut legacy_chan_update_info_with_none.as_slice());
3300                 assert!(read_chan_update_info_res.is_err());
3301
3302                 // 2. Test encoding/decoding of ChannelInfo
3303                 // Check we can encode/decode ChannelInfo without ChannelUpdateInfo fields present.
3304                 let chan_info_none_updates = ChannelInfo {
3305                         features: channelmanager::provided_channel_features(&config),
3306                         node_one: NodeId::from_pubkey(&nodes[0].node.get_our_node_id()),
3307                         one_to_two: None,
3308                         node_two: NodeId::from_pubkey(&nodes[1].node.get_our_node_id()),
3309                         two_to_one: None,
3310                         capacity_sats: None,
3311                         announcement_message: None,
3312                         announcement_received_time: 87654,
3313                 };
3314
3315                 let mut encoded_chan_info: Vec<u8> = Vec::new();
3316                 assert!(chan_info_none_updates.write(&mut encoded_chan_info).is_ok());
3317
3318                 let read_chan_info: ChannelInfo = crate::util::ser::Readable::read(&mut encoded_chan_info.as_slice()).unwrap();
3319                 assert_eq!(chan_info_none_updates, read_chan_info);
3320
3321                 // Check we can encode/decode ChannelInfo with ChannelUpdateInfo fields present.
3322                 let chan_info_some_updates = ChannelInfo {
3323                         features: channelmanager::provided_channel_features(&config),
3324                         node_one: NodeId::from_pubkey(&nodes[0].node.get_our_node_id()),
3325                         one_to_two: Some(chan_update_info.clone()),
3326                         node_two: NodeId::from_pubkey(&nodes[1].node.get_our_node_id()),
3327                         two_to_one: Some(chan_update_info.clone()),
3328                         capacity_sats: None,
3329                         announcement_message: None,
3330                         announcement_received_time: 87654,
3331                 };
3332
3333                 let mut encoded_chan_info: Vec<u8> = Vec::new();
3334                 assert!(chan_info_some_updates.write(&mut encoded_chan_info).is_ok());
3335
3336                 let read_chan_info: ChannelInfo = crate::util::ser::Readable::read(&mut encoded_chan_info.as_slice()).unwrap();
3337                 assert_eq!(chan_info_some_updates, read_chan_info);
3338
3339                 // Check the serialization hasn't changed.
3340                 let legacy_chan_info_with_some: Vec<u8> = hex::decode("ca00020000010800000000000156660221027f921585f2ac0c7c70e36110adecfd8fd14b8a99bfb3d000a283fcac358fce88043636340004000000170201010402002a060800000000000004d2080909000000000000162e0a0d0c00040000000902040000000a0c010006210355f8d2238a322d16b602bd0ceaad5b01019fb055971eaadcc9b29226a4da6c23083636340004000000170201010402002a060800000000000004d2080909000000000000162e0a0d0c00040000000902040000000a0c01000a01000c0100").unwrap();
3341                 assert_eq!(encoded_chan_info, legacy_chan_info_with_some);
3342
3343                 // Check we can decode legacy ChannelInfo, even if the `two_to_one` / `one_to_two` /
3344                 // `last_update_message` fields fail to decode due to missing htlc_maximum_msat.
3345                 let legacy_chan_info_with_some_and_fail_update = hex::decode("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").unwrap();
3346                 let read_chan_info: ChannelInfo = crate::util::ser::Readable::read(&mut legacy_chan_info_with_some_and_fail_update.as_slice()).unwrap();
3347                 assert_eq!(read_chan_info.announcement_received_time, 87654);
3348                 assert_eq!(read_chan_info.one_to_two, None);
3349                 assert_eq!(read_chan_info.two_to_one, None);
3350
3351                 let legacy_chan_info_with_none: Vec<u8> = hex::decode("ba00020000010800000000000156660221027f921585f2ac0c7c70e36110adecfd8fd14b8a99bfb3d000a283fcac358fce88042e2e2c0004000000170201010402002a060800000000000004d20801000a0d0c00040000000902040000000a0c010006210355f8d2238a322d16b602bd0ceaad5b01019fb055971eaadcc9b29226a4da6c23082e2e2c0004000000170201010402002a060800000000000004d20801000a0d0c00040000000902040000000a0c01000a01000c0100").unwrap();
3352                 let read_chan_info: ChannelInfo = crate::util::ser::Readable::read(&mut legacy_chan_info_with_none.as_slice()).unwrap();
3353                 assert_eq!(read_chan_info.announcement_received_time, 87654);
3354                 assert_eq!(read_chan_info.one_to_two, None);
3355                 assert_eq!(read_chan_info.two_to_one, None);
3356         }
3357
3358         #[test]
3359         fn node_info_is_readable() {
3360                 // 1. Check we can read a valid NodeAnnouncementInfo and fail on an invalid one
3361                 let announcement_message = hex::decode("d977cb9b53d93a6ff64bb5f1e158b4094b66e798fb12911168a3ccdf80a83096340a6a95da0ae8d9f776528eecdbb747eb6b545495a4319ed5378e35b21e073a000122013413a7031b84c5567b126440995d3ed5aaba0565d71e1834604819ff9c17f5e9d5dd078f2020201010101010101010101010101010101010101010101010101010101010101010000701fffefdfc2607").unwrap();
3362                 let announcement_message = NodeAnnouncement::read(&mut announcement_message.as_slice()).unwrap();
3363                 let valid_node_ann_info = NodeAnnouncementInfo {
3364                         features: channelmanager::provided_node_features(&UserConfig::default()),
3365                         last_update: 0,
3366                         rgb: [0u8; 3],
3367                         alias: NodeAlias([0u8; 32]),
3368                         announcement_message: Some(announcement_message)
3369                 };
3370
3371                 let mut encoded_valid_node_ann_info = Vec::new();
3372                 assert!(valid_node_ann_info.write(&mut encoded_valid_node_ann_info).is_ok());
3373                 let read_valid_node_ann_info = NodeAnnouncementInfo::read(&mut encoded_valid_node_ann_info.as_slice()).unwrap();
3374                 assert_eq!(read_valid_node_ann_info, valid_node_ann_info);
3375                 assert_eq!(read_valid_node_ann_info.addresses().len(), 1);
3376
3377                 let encoded_invalid_node_ann_info = hex::decode("3f0009000788a000080a51a20204000000000403000000062000000000000000000000000000000000000000000000000000000000000000000a0505014004d2").unwrap();
3378                 let read_invalid_node_ann_info_res = NodeAnnouncementInfo::read(&mut encoded_invalid_node_ann_info.as_slice());
3379                 assert!(read_invalid_node_ann_info_res.is_err());
3380
3381                 // 2. Check we can read a NodeInfo anyways, but set the NodeAnnouncementInfo to None if invalid
3382                 let valid_node_info = NodeInfo {
3383                         channels: Vec::new(),
3384                         announcement_info: Some(valid_node_ann_info),
3385                 };
3386
3387                 let mut encoded_valid_node_info = Vec::new();
3388                 assert!(valid_node_info.write(&mut encoded_valid_node_info).is_ok());
3389                 let read_valid_node_info = NodeInfo::read(&mut encoded_valid_node_info.as_slice()).unwrap();
3390                 assert_eq!(read_valid_node_info, valid_node_info);
3391
3392                 let encoded_invalid_node_info_hex = hex::decode("4402403f0009000788a000080a51a20204000000000403000000062000000000000000000000000000000000000000000000000000000000000000000a0505014004d20400").unwrap();
3393                 let read_invalid_node_info = NodeInfo::read(&mut encoded_invalid_node_info_hex.as_slice()).unwrap();
3394                 assert_eq!(read_invalid_node_info.announcement_info, None);
3395         }
3396
3397         #[test]
3398         fn test_node_info_keeps_compatibility() {
3399                 let old_ann_info_with_addresses = hex::decode("3f0009000708a000080a51220204000000000403000000062000000000000000000000000000000000000000000000000000000000000000000a0505014104d2").unwrap();
3400                 let ann_info_with_addresses = NodeAnnouncementInfo::read(&mut old_ann_info_with_addresses.as_slice())
3401                                 .expect("to be able to read an old NodeAnnouncementInfo with addresses");
3402                 // This serialized info has an address field but no announcement_message, therefore the addresses returned by our function will still be empty
3403                 assert!(ann_info_with_addresses.addresses().is_empty());
3404         }
3405 }
3406
3407 #[cfg(ldk_bench)]
3408 pub mod benches {
3409         use super::*;
3410         use std::io::Read;
3411         use criterion::{black_box, Criterion};
3412
3413         pub fn read_network_graph(bench: &mut Criterion) {
3414                 let logger = crate::util::test_utils::TestLogger::new();
3415                 let mut d = crate::routing::router::bench_utils::get_route_file().unwrap();
3416                 let mut v = Vec::new();
3417                 d.read_to_end(&mut v).unwrap();
3418                 bench.bench_function("read_network_graph", |b| b.iter(||
3419                         NetworkGraph::read(&mut std::io::Cursor::new(black_box(&v)), &logger).unwrap()
3420                 ));
3421         }
3422
3423         pub fn write_network_graph(bench: &mut Criterion) {
3424                 let logger = crate::util::test_utils::TestLogger::new();
3425                 let mut d = crate::routing::router::bench_utils::get_route_file().unwrap();
3426                 let net_graph = NetworkGraph::read(&mut d, &logger).unwrap();
3427                 bench.bench_function("write_network_graph", |b| b.iter(||
3428                         black_box(&net_graph).encode()
3429                 ));
3430         }
3431 }