AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 19 Bitcoin

p2p: remove io::Error from exposed API

Public commit record

What the developer wrote

Authored by Nick Johnson

60/100 · Adequate
p2p: remove io::Error from exposed API

Part of the process to break the p2p package's dependency on the old io
package.
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
The short version

What changed, and why it matters

This commit refactors how Bitcoin peer-to-peer address errors are reported. It replaces a generic input/output error type with a new, more specific error type for addresses that cannot be routed over normal internet connections (Tor, I2P, CJDNS). This is a routine API cleanup, not a fix for an active security vulnerability. The change is part of a larger effort to reduce internal package dependencies.

Recommended action

No immediate security action required. Treat as a normal API-breaking change. Downstream users relying on the exact `std::io::Error` returned by `socket_addr()` or on `AddrV2ToIpAddrError` will need to update their code. Review release notes for migration guidance when this change ships.

Security signals we found

01

API surface reduction: removes a generic I/O error type from public P2P address methods

02

Error semantics change: Tor V2 onion addresses now produce a dedicated error variant instead of a generic address-not-available error

03

No input validation, parsing bounds, or cryptographic logic changes observed

04

No unsafe code, no allocator changes, no network buffer handling changes

Risk score

Why this scored 19/100

Our methodology →
Potential impact 2/30
Exploitability 1/25
Stealth signal 1/15
Affected reach 3/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.