rust-bitcoin

This is a minor code cleanup commit. It removes an unnecessary intermediate variable, updates a doc comment to match a previous API change, and removes an outdated comment in a test. There is no functional change and no security impact.

This commit adds convenience methods so that a Bitcoin keypair can sign messages directly, without callers having to reach into the underlying secp256k1 library. It is a code-cleanup and API-ergonomics change, not a fix for a known bug or vulnerability. The new methods wrap the same underlying signing functions that were already being used, so the cryptographic behavior is unchanged.

This commit is a routine code cleanup and feature addition. It adds new helper functions for reading small and medium-sized unsigned integers (u16 and u64) from hexadecimal strings, using the same safe approach already used for u32 and u128. There is no indication of a security bug being fixed or introduced.

This commit changes how the library exposes a Bitcoin secret key pair internally. Previously, calling `to_inner()` made a full copy of the secret key data. The new `as_inner()` returns a reference instead, so the secret bytes are not duplicated in memory as often. This is a defensive hardening change: it reduces the number of copies of sensitive key material floating around in memory, which slightly lowers the chance that a secret key could leak through memory dumps, swap, or debugging. It is not a fix for an active bug or a directly exploitable vulnerability.

This commit only updates a generated text file listing the public API surface of the crate. It adds four new public methods for converting Bitcoin scripts to/from hex strings. There is no code change, no bug fix, and no security relevance visible in the diff.

This commit simply moves an existing unit test from one file to another within the same project. It does not change any production code, fix a bug, or alter behavior. There is no security relevance.

This is a routine internal code reorganization. It moves two helper functions that convert Bitcoin scripts to hexadecimal strings from the main `bitcoin` crate into the lower-level `primitives` crate. The functions still behave the same way; they are just located in a different module. There is no security fix or vulnerability here.

This commit only adds a new unit test for existing script hex parsing and formatting functions. It does not change any production code, fix any bug, or alter behavior. There is no security relevance.

This commit is a routine code reorganization: it moves functions that parse Bitcoin script hex strings from the main `bitcoin` crate into the lower-level `primitives` crate. The old functions in `bitcoin` are kept as deprecated aliases so existing code keeps working. There is no security fix or vulnerability here.

This is a tiny code cleanup change inside unit tests. It replaces `alloc::format!` with the shorter `format!` because the macro is already available in the test module. There is no functional change and no security relevance.

This commit simply moves existing unit tests from two separate files into a single shared test file. It does not change any production code, behavior, or security logic. There is no security impact.

This commit simply moves existing automated tests from one file to another within the project's source code. It does not change any actual program logic, fix bugs, or alter behavior. There is no security relevance.

This commit only renames test functions in a single test file so the names match the project's preferred spelling (script_buf instead of scriptbuf). No code behavior changes, no security relevance.

This commit removes redundant Rust feature gates inside a module that is already entirely gated behind the 'alloc' feature. It is a code cleanup change with no security relevance.

This commit swaps out the old way of turning hex strings into Bitcoin scripts for a newer, more stable set of libraries. It also introduces a clearer error type so callers can tell whether something went wrong with the hex string itself or with decoding the script. The change is described by the project as a hardening/cleanup move, not a fix for a known vulnerability.

This is a routine code-maintenance change. The developers replaced one way of reading hexadecimal strings with another, because the old helper tool (the `FromHex` trait) is being removed in an upcoming version of a dependency. The function being changed is already marked as deprecated, so it is not the preferred way to do things. There is no indication this fixes a security bug or introduces a vulnerability.

This commit simply removes two outdated lines from a code comment. The removed text incorrectly claimed that the function always sets an even parity, but the function actually accepts a parity argument supplied by the caller. There is no code change and no security issue.

This commit is a routine dependency cleanup. It removes the external hex_lit crate and switches test/example code to use built-in hex macros from the project's own hex-conservative crate. There is no user-facing behavior change and no security fix or vulnerability introduced.

This commit only bumps the version of a small helper library (hex-conservative) used for converting bytes to and from hexadecimal strings. No code behavior in rust-bitcoin itself is changed, and the commit message gives no indication that this is a security fix.

This commit is a routine API rename with no security bug. It renames functions in the Rust Bitcoin library that handle private key bytes so their names include the word 'secret' (for example, 'to_vec' becomes 'to_secret_vec' and 'from_byte_array' becomes 'from_secret_bytes'). The goal is to make it more obvious to developers when they are working with sensitive secret material. The actual behavior of the code is unchanged.

This commit is a build-system cleanup, not a security fix. It removes crate-wide switches that made entire Rust sub-crates disappear when the 'alloc' feature was off, and instead marks individual functions and types as requiring 'alloc'. The stated reason is to fix linking problems in no-alloc builds, not to patch a vulnerability. There is no evidence in the commit of an exploitable bug.

This commit fixes a bug in how the library reads PSBT (Partially Signed Bitcoin Transaction) keys. A recent change accidentally made it possible for a malformed input to cause an arithmetic underflow when calculating how many bytes of key data remain. In debug builds that would panic (crash); in release builds it could wrap around and behave incorrectly. The fix uses a safe checked subtraction and returns a proper parsing error instead.

This commit simply deletes old fuzzing test input files that were used with the honggfuzz tool. The project has switched to a different fuzzer (libfuzzer), so these files are no longer needed. No code changes were made, and there is no security fix or vulnerability introduced.

This commit fixes missing public re-exports of encoder/decoder types and their error types in the rust-bitcoin crate. It is a packaging/API consistency fix: the bitcoin crate is meant to expose everything primitives exposes, and primitives everything units exposes. The change adds those missing re-exports and updates the test scripts that check this property. There is no indication of a runtime vulnerability, memory corruption, or exploit path.

This commit is a maintenance change that switches the project's fuzz testing framework from Honggfuzz to libfuzzer (cargo-fuzz). It updates build files, CI configuration, documentation, and fuzz target source files to use the new framework. There is no change to the actual Bitcoin library code that end users or applications depend on, and no security vulnerability is introduced or fixed.