Conversation
clintcan
force-pushed
the
chore/pin-bump-e258f6a0
branch
from
October 1, 2026 13:01
e1faedf to
69933bf
Compare
3-way merge conflict counts per fork (139 hunks), the build cascade (dvc fork must go; acceptor/rdpdr API changes; 37 vendored-server errors before src/), the multitransport module and ironrdp-rdpeudp name clashes, and the order of work.
391 upstream commits; no crate version changed, so only the git revs move. The branch does not build until the vendored forks are rebased onto the new rev (dvc, acceptor, rdpdr, server — see the dry-run map in TODO.md).
The fork's Soft-Sync PDU codec (divergence 1) is retired: upstream #1584 has its own (SoftSyncTunnelType, SoftSyncRequestPdu::new, tunnels_to_switch), with the same flag rule. src/ is now upstream e258f6a0 verbatim plus one pure addition, DrdynvcServer::request_soft_sync(tunnel_type, channel_ids): - upstream's state machine validates the client's response against a request (an unsolicited/unrequested-tunnel response is an error that ends the session), but its only request API is request_reliable_udp, which is reliable-only, needs a channel, and registers tunnel routing that makes process() reject the channel's data over TCP; - request_soft_sync records the request (so the response validates) for the lossy tunnel or with no channels, and leaves per-channel routing to the caller, keeping macrdp's TCP fallback for a wedged tunnel working. Five tests in the module (run on a scratch copy with test = true: 12 pass); mutation-checked — registering routing fails the key test. Standalone build, clippy -D warnings and stable fmt clean; the diff against upstream src/ has no removed lines. Callers are ported with the server-fork rebase; the branch still does not build until then.
src/ is upstream e258f6a0 verbatim except connection.rs (+59/-9), which keeps two divergences: - (4) client fingerprint (client_name / client_version / client_build on AcceptorResult), unchanged in behaviour. - (5) new: set_multitransport_requested_protocol(RequestedProtocol). Upstream's own offer (#1951) only requests UdpFecR; lossy audio needs UdpFecL. Default stays UdpFecR, so upstream behaviour is unchanged when it isn't called. Retires our multitransport offer machinery (MultitransportOffer, multitransport_offered, the finalization channel skip) in favour of upstream's offer, security-RNG hook and late-response tolerance. Tested against IronRDP's testsuite-core (17 acceptor tests incl. 4 new, 1731 total) with both divergences mutation-checked; see CLAUDE.md. The branch still doesn't build: the rdpdr and server forks are next.
Upstream made the drive (EFS) PDU layer two-way (#1779) and fixed variable-length smart-card contexts/handles (#1654), so most of the fork retires. src/ is now upstream verbatim plus two new files, wired in by four lines across three upstream files: - pdu/server_direction.rs: a public Encode/SvcEncode for ServerDriveIoRequest (upstream's equivalent is private) and ScardControlRequest, now built on upstream's DeviceControlRequest::encode. - pdu/esc/server_direction.rs: the smart-card server direction upstream still lacks (encode *Call, decode *Return), adapted to upstream's new Option-based return shapes. Keeps the live-Windows rule that an empty pbExtraBytes is a NULL referent, which upstream's SCardIORequest encoder does not do. - device_type() made pub. 52 tests pass (upstream's 38 plus 14 of ours), clippy clean; seven mutations of the live-Windows rules are each caught. Our server code needs 10 mechanical fixes, listed in CLAUDE.md for the server step. Also: Cargo.lock picks up rand (acceptor, previous step) and getrandom (rdpdr), both already locked; root Cargo.toml comments for the acceptor and rdpdr forks were stale and now match what each fork carries. The branch still doesn't build: the server fork is next.
Upstream e258f6a0 now ships much of what the fork carried, so the fork was rebuilt as upstream verbatim plus macrdp's own files and marked hook edits, rather than a 51-conflict merge. Retired (macrdp's src/ switches to upstream's API in the next step): SuppressOutput (5), NSCodec (6, now the `nscodec` feature), honor client desktop size (9), keyboard-layout cell (10), auto-reconnect cookie (13), mouse position before button (21), auth-gated preemption (22/23, now ConnectionPolicy::Preempt), and the undocumented ClipboardFileCopy event. Kept, re-applied onto upstream's code: the audio task and lag model (2/3/8), batch priority (4), our RDPDR/USB/camera/microphone channels (11/16/19/25, alongside upstream's inert equivalents), UDP multitransport (12, all server-side logic in mt/session.rs, ported to the rebased acceptor's offer API and dvc's request_soft_sync), the EGFX decline flag (14), accept-time RTT (15, now also for preemption winners), on_authenticated (18), the fingerprint log (20), and input reset (24). Name clashes with upstream resolved by renaming ours: the drive channel's types and builder method, the USB builder method, the src/multitransport module (now src/mt), and our RDPEUDP crate (now macrdp-rdpeudp, so upstream's ironrdp-rdpeudp can be pinned alongside it). Behaviour changes from adopting upstream, on the live-test list: returning auto-reconnect cookies are now HMAC-verified (a reconnect after a process restart is denied), and spec-following clients now receive SuppressOutput support and so get minimize handling. The old divergence log is kept as DIVERGENCE-HISTORY.md; CLAUDE.md is rewritten for the new shape. The server crate builds under every feature combination, fmt and clippy clean apart from two upstream lints. macrdp's own src/ is the next step, so the branch still doesn't build.
The branch builds again: 266 tests pass, fmt (stable and nightly) and clippy -D warnings are clean, and cargo-deny passes on the new dependencies. - Builder instead of runtime setters for what upstream now owns: the display-suppressed flag, honor-client-desktop-size (with the --max-client-size ceiling folded into one Option), the auto-reconnect cookie, and ConnectionPolicy::Preempt. Preempt must be explicit: upstream's default (Queue) silently brings back the second-client hang. conn_test's servers mirror these settings. - Connection hooks are composed, not wrapped. lock_activity's ActivityHandler forwarded each hook by hand, so upstream's new on_connection_info would have been silently swallowed whenever --lock-on-disconnect was on. ConnectionHooks (src/conn_hooks.rs) runs the auth guard, the activity record, and the new keyboard-layout hook in order, stopping at the first rejection. - Mouse buttons carry their position (upstream #1769): move first, then click, for every button. Horizontal wheel is newly reported and mapped to horizontal scrolling. - The display traits return upstream's error type; the capture loop stays on anyhow and converts at the boundary (no change to its body). - Smaller moves: drive types renamed (RdpdrDrive*), the USB builder method, ClipboardFileCopy to SendInitiateFileCopy, the smart card handle rebuilt through from_opaque, and the Soft-Sync wire-byte tests ported to upstream's PDU types with the expected bytes unchanged. - x509-cert declares its std feature: macrdp used Time::to_system_time but only got the feature by unifying with the old server's x509-cert. - macrdp-rdpeudp: the standalone pin was still a5d1c682 and its fuzz harness still asked for ironrdp-core 0.1 at 879ffed (broken since the last bump, unnoticed because CI doesn't build it). Both now e258f6a0. Not verified locally: the Linux build (cross-compiling the C deps fails here); CI covers it. Live testing is still to come.
- vendor/ironrdp-rdpeudp is now vendor/macrdp-rdpeudp, and the server's multitransport code lives in src/mt/. - APIs that moved upstream: the keyboard layout now arrives through on_connection_info, honor-size, the auto-reconnect cookie and SuppressOutput are set through the builder, and Mac-to-Windows file copy goes through ClipboardMessage::SendInitiateFileCopy. - Two behaviour changes are flagged in the notes they touch: upstream HMAC-verifies the auto-reconnect cookie, so a reconnect after a process restart is denied it; and upstream advertises SuppressOutput, so FreeRDP and Thincast now get the minimize mute. - TODO records progress and the live-test list.
The four step-4 audits' recommendations are all in the code. Three behaviour caveats from them weren't recorded anywhere: - The ARC cookie is now rotated on every Deactivation-Reactivation, including blank-recovery heals. - The multitransport offer now requires the client's MCS message channel. - Upstream decodes URBDRC completions more strictly (as isoch).
capture.rs and conn_test.rs still named the retired runtime setter RdpServer::set_honor_client_desktop_size. Comment-only.
clintcan
force-pushed
the
chore/pin-bump-e258f6a0
branch
from
October 1, 2026 23:15
69933bf to
b418780
Compare
The Mac mini live tests so far: the passes, the two fixes that landed on main (#195, #196), and what's still to do. Also a Deferred entry for the intermittent client-to-mini clipboard gap: it happens on v0.9.6 too, so it isn't a bump regression. It includes the test gotchas behind yesterday's false reading.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Moves the IronRDP pin from a5d1c682 to e258f6a0 (391 upstream commits; no crate versions changed, only the git revs).
Draft: the code is done and passes locally on macOS. Still to do: live client tests, the soak, then v0.10.0.
What changed
(macrdp ...). Each fork'sCLAUDE.mdlists what is left.ironrdp-dvc: one addition (request_soft_sync).ironrdp-acceptor: the client fingerprint, and the requested protocol for the multitransport offer.ironrdp-rdpdr: the smart-card (server-direction) side only. The drive PDUs are upstream now.ironrdp-server: the old divergence log is frozen inDIVERGENCE-HISTORY.md, and the multitransport code moved tosrc/mt/.ConnectionPolicy::Preempt. Upstream's default isQueue, which would silently bring back the second-client hang.vendor/ironrdp-rdpeudpis nowvendor/macrdp-rdpeudp, and the drive types are nowRdpdrDrive*. Upstream's RDPDR, mic, USB and UDP paths are left unset, so they stay inactive.src/:src/conn_hooks.rscomposes the connection handlers. It replaceslock_activity's wrapper, which would have swallowed upstream's newon_connection_info.ServerResult.x509-certdeclares itsstdfeature, which it had only been getting indirectly.Behaviour changes to live-test
Verified locally (macOS)
-D warnings,cargo check --all-targets, and a release build.-D warnings.cargo-denyfor the root crate and the standalone crate.--all-features.macrdp-rdpeudppasses 53 tests and its fuzz harness builds.Not verifiable here: the Linux build. That's what this PR's CI is for.
Remaining before merge
Live tests with mstsc, FreeRDP, Windows App and iOS (list in TODO.md), then a 48–72 h soak including a headless mode, then v0.10.0. This also supersedes #182.