Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
44 changes: 44 additions & 0 deletions lightning/src/chain/channelmonitor.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -706,6 +706,17 @@ pub(crate) enum ChannelMonitorUpdateStep {
ReleasePaymentComplete {
htlc: SentHTLCId,
},
/// When an [`Event::PaymentClaimed`] is processed by the user, we need to track that so we don't
/// keep regenerating the event redundantly on startup.
///
/// This will remove the HTLC from [`ChannelMonitor::get_stored_preimages`].
///
/// Note that this is only generated for closed channels -- if the channel is open, the inbound
/// payment is pruned automatically when the HTLC is no longer present in any unrevoked
/// commitment transaction.
InboundPaymentClaimed {
payment_hash: PaymentHash,
},
}

impl ChannelMonitorUpdateStep {
Expand All@@ -723,6 +734,7 @@ impl ChannelMonitorUpdateStep {
ChannelMonitorUpdateStep::RenegotiatedFunding { .. } => "RenegotiatedFunding",
ChannelMonitorUpdateStep::RenegotiatedFundingLocked { .. } => "RenegotiatedFundingLocked",
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => "ReleasePaymentComplete",
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => "InboundPaymentClaimed",
}
}
}
Expand DownExpand Up@@ -769,6 +781,9 @@ impl_writeable_tlv_based_enum_upgradable!(ChannelMonitorUpdateStep,
(3, htlc_data, required),
(5, claimed_htlcs, required_vec),
},
(9, InboundPaymentClaimed) => {
(1, payment_hash, required),
},
(10, RenegotiatedFunding) => {
(1, channel_parameters, (required: ReadableArgs, None)),
(3, holder_commitment_tx, required),
Expand DownExpand Up@@ -1342,6 +1357,10 @@ pub(crate) struct ChannelMonitorImpl<Signer: EcdsaChannelSigner> {
/// this and we'll store the set of fully resolved payments here.
htlcs_resolved_to_user: HashSet<SentHTLCId>,

/// The set of inbound payments for which the user has processed an [`Event::PaymentClaimed`].
/// This is used to avoid regenerating the event redundantly on restart for closed channels.
inbound_payments_claimed: HashSet<PaymentHash>,

/// The set of `SpendableOutput` events which we have already passed upstream to be claimed.
/// These are tracked explicitly to ensure that we don't generate the same events redundantly
/// if users duplicatively confirm old transactions. Specifically for transactions claiming a
Expand DownExpand Up@@ -1755,6 +1774,7 @@ pub(crate) fn write_chanmon_internal<Signer: EcdsaChannelSigner, W: Writer>(
(34, channel_monitor.alternative_funding_confirmed, option),
(35, channel_monitor.is_manual_broadcast, required),
(37, channel_monitor.funding_seen_onchain, required),
(39, channel_monitor.inbound_payments_claimed, required),
});

Ok(())
Expand DownExpand Up@@ -1954,6 +1974,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {
confirmed_commitment_tx_counterparty_output: None,
htlcs_resolved_on_chain: Vec::new(),
htlcs_resolved_to_user: new_hash_set(),
inbound_payments_claimed: new_hash_set(),
spendable_txids_confirmed: Vec::new(),

best_block,
Expand DownExpand Up@@ -3249,6 +3270,20 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {

pub(crate) fn get_stored_preimages(

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure if we want to also rename this method

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yea, for sure.

&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
let inner = self.inner.lock().unwrap();

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, can we do this on a per-PaymentClaimDetails basis instead? In theory we can have two payments with the same hash/preimage.

inner
.payment_preimages
.iter()
.filter(|(hash, _)| !inner.inbound_payments_claimed.contains(*hash))
.map(|(hash, value)| (*hash, value.clone()))
.collect()
}

/// Used in tests to verify preimage propagation.
#[cfg(test)]
pub(crate) fn test_get_all_stored_preimages(
&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
self.inner.lock().unwrap().payment_preimages.clone()
}
Expand DownExpand Up@@ -4150,6 +4185,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
assert_eq!(updates.updates.len(), 1);
match updates.updates[0] {
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
// We should have already seen a `ChannelForceClosed` update if we're trying to
// provide a preimage at this point.
Expand DownExpand Up@@ -4281,6 +4317,10 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
log_trace!(logger, "HTLC {htlc:?} permanently and fully resolved");
self.htlcs_resolved_to_user.insert(*htlc);
},
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash } => {
log_trace!(logger, "Inbound payment {} claimed", payment_hash);
self.inbound_payments_claimed.insert(*payment_hash);
},
}
}

Expand DownExpand Up@@ -4313,6 +4353,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
ChannelMonitorUpdateStep::PaymentPreimage { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
}
}

Expand DownExpand Up@@ -6504,6 +6545,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
let mut funding_spend_confirmed = None;
let mut htlcs_resolved_on_chain = Some(Vec::new());
let mut htlcs_resolved_to_user = Some(new_hash_set());
let mut inbound_payments_claimed = Some(new_hash_set());
let mut funding_spend_seen = Some(false);
let mut counterparty_node_id = None;
let mut confirmed_commitment_tx_counterparty_output = None;
Expand DownExpand Up@@ -6543,6 +6585,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
(34, alternative_funding_confirmed, option),
(35, is_manual_broadcast, (default_value, false)),
(37, funding_seen_onchain, (default_value, true)),
(39, inbound_payments_claimed, option),

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assuming that write as required but read as option is intentional to be forwards compatible for old monitors?

});
// Note that `payment_preimages_with_info` was added (and is always written) in LDK 0.1, so
// we can use it to determine if this monitor was last written by LDK 0.1 or later.
Expand DownExpand Up@@ -6708,6 +6751,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
confirmed_commitment_tx_counterparty_output,
htlcs_resolved_on_chain: htlcs_resolved_on_chain.unwrap(),
htlcs_resolved_to_user: htlcs_resolved_to_user.unwrap(),
inbound_payments_claimed: inbound_payments_claimed.unwrap(),
spendable_txids_confirmed: spendable_txids_confirmed.unwrap(),

best_block,
Expand Down
1 change: 1 addition & 0 deletions lightning/src/ln/chanmon_update_fail_tests.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -4598,6 +4598,7 @@ fn test_claim_to_closed_channel_blocks_claimed_event() {
// available.
nodes[1].chain_monitor.complete_sole_pending_chan_update(&chan_a.2);
expect_payment_claimed!(nodes[1], payment_hash, 1_000_000);
check_added_monitors(&nodes[1], 1);
}

#[test]
Expand Down
176 changes: 125 additions & 51 deletions lightning/src/ln/channelmanager.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -1475,6 +1475,21 @@ impl_writeable_tlv_based!(PaymentCompleteUpdate, {
(7, htlc_id, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) struct InboundPaymentClaimedUpdate {
pub counterparty_node_id: PublicKey,
pub channel_funding_outpoint: OutPoint,
pub channel_id: ChannelId,
pub payment_hash: PaymentHash,
}

impl_writeable_tlv_based!(InboundPaymentClaimedUpdate, {
(1, counterparty_node_id, required),
(3, channel_funding_outpoint, required),
(5, channel_id, required),
(7, payment_hash, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) enum EventCompletionAction {
ReleaseRAAChannelMonitorUpdate {
Expand All@@ -1489,6 +1504,12 @@ pub(crate) enum EventCompletionAction {
/// fully-resolved in the [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.2!
ReleasePaymentCompleteChannelMonitorUpdate(PaymentCompleteUpdate),

/// When a payment's resolution is communicated to the downstream logic via
/// [`Event::PaymentClaimed`], we may want to mark the payment as fully-resolved in the
/// [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.3!
InboundPaymentClaimedChannelMonitorUpdate(InboundPaymentClaimedUpdate),
}
impl_writeable_tlv_based_enum!(EventCompletionAction,
(0, ReleaseRAAChannelMonitorUpdate) => {
Expand All@@ -1500,8 +1521,9 @@ impl_writeable_tlv_based_enum!(EventCompletionAction,
}
ChannelId::v1_from_funding_outpoint(channel_funding_outpoint.unwrap())
})),
}
},
{1, ReleasePaymentCompleteChannelMonitorUpdate} => (),
{3, InboundPaymentClaimedChannelMonitorUpdate} => (),
);

/// The source argument which is passed to [`ChannelManager::claim_mpp_part`].
Expand DownExpand Up@@ -9982,11 +10004,34 @@ This indicates a bug inside LDK. Please report this error at https://github.com/
let action = if let Some((outpoint, counterparty_node_id, channel_id)) =
durable_preimage_channel
{
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
let per_peer_state = self.per_peer_state.read().unwrap();
let is_channel_closed = per_peer_state
.get(&counterparty_node_id)
.map(|peer_state_mutex| {
let peer_state = peer_state_mutex.lock().unwrap();
!peer_state.channel_by_id.contains_key(&channel_id)
})
.unwrap_or(true);
// For open channels, we use ReleaseRAAChannelMonitorUpdate to maintain the blocking
// behavior (RAA updates are blocked until the PaymentClaimed event is handled).
// For closed channels, we use InboundPaymentClaimedChannelMonitorUpdate to persist
// that the PaymentClaimed event has been handled, preventing regeneration on restart.
Comment on lines +10017 to +10018

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

perhaps too edge-casey to worry about(?): durable_preimage_channel is picked as the last MPP channel, if this happens to be open and another one is closed do we still run into the duplicate events issue?

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a good point. It's tricky to fix, unfortunately, since we only have the OutPoint for the durable channel and we need that field to support downgrades to 0.1-. If we went for a more robust fix here and figured out backwards compat to persist outpoints for all channels, it seems like the simplest way would be to always issue this new monitor update for every MPP part when the event is processed, which is kind of annoying.

Since this fix is already not fully robust, only an improvement on the previous situation, my preference would be to just keep it as-is at least for now.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

and we need that field to support downgrades to 0.1

Was wondering if this is still supported, bc there's a comment about using htlcs instead once we don't. Happy to leave as-is 👌

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, yeah, I mean if people feel like this fix is too narrow and we should just accept redundant events until the channel is archived, I could honestly get behind that as well.

if is_channel_closed {

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I went with only generating these new monitor updates for claims on closed channels. So after #4462 we will still potentially have increased redundant PaymentClaimed events on restart for claims on open channels, until the claim is removed from all unrevoked commit txs. The approach is currently simple so I'm not sure it's worth fixing that, but open to thoughts.

Some(EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
channel_funding_outpoint: outpoint,
counterparty_node_id,
channel_id,
payment_hash,
},
))
} else {
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
}
} else {
None
};
Expand DownExpand Up@@ -14809,56 +14854,85 @@ impl<
htlc_id,
},
) => {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![ChannelMonitorUpdateStep::ReleasePaymentComplete {
htlc: htlc_id,
}],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: channel_funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
channel_funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
let update_step =
ChannelMonitorUpdateStep::ReleasePaymentComplete { htlc: htlc_id };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
counterparty_node_id,
channel_funding_outpoint,
channel_id,
payment_hash,
},
) => {
let update_step =
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
}
}
}

/// Helper for handling closed-channel monitor updates triggered by [`EventCompletionAction`]s.
fn handle_closed_channel_monitor_update_for_event(
&self, counterparty_node_id: PublicKey, funding_outpoint: OutPoint, channel_id: ChannelId,
update_step: ChannelMonitorUpdateStep,
) {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![update_step],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
}
/// Processes any events asynchronously in the order they were generated since the last call
/// using the given event handler.
///
Expand Down
Loading
Loading
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
44 changes: 44 additions & 0 deletions lightning/src/chain/channelmonitor.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -706,6 +706,17 @@ pub(crate) enum ChannelMonitorUpdateStep {
ReleasePaymentComplete {
htlc: SentHTLCId,
},
/// When an [`Event::PaymentClaimed`] is processed by the user, we need to track that so we don't
/// keep regenerating the event redundantly on startup.
///
/// This will remove the HTLC from [`ChannelMonitor::get_stored_preimages`].
///
/// Note that this is only generated for closed channels -- if the channel is open, the inbound
/// payment is pruned automatically when the HTLC is no longer present in any unrevoked
/// commitment transaction.
InboundPaymentClaimed {
payment_hash: PaymentHash,
},
}

impl ChannelMonitorUpdateStep {
Expand All@@ -723,6 +734,7 @@ impl ChannelMonitorUpdateStep {
ChannelMonitorUpdateStep::RenegotiatedFunding { .. } => "RenegotiatedFunding",
ChannelMonitorUpdateStep::RenegotiatedFundingLocked { .. } => "RenegotiatedFundingLocked",
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => "ReleasePaymentComplete",
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => "InboundPaymentClaimed",
}
}
}
Expand DownExpand Up@@ -769,6 +781,9 @@ impl_writeable_tlv_based_enum_upgradable!(ChannelMonitorUpdateStep,
(3, htlc_data, required),
(5, claimed_htlcs, required_vec),
},
(9, InboundPaymentClaimed) => {
(1, payment_hash, required),
},
(10, RenegotiatedFunding) => {
(1, channel_parameters, (required: ReadableArgs, None)),
(3, holder_commitment_tx, required),
Expand DownExpand Up@@ -1342,6 +1357,10 @@ pub(crate) struct ChannelMonitorImpl<Signer: EcdsaChannelSigner> {
/// this and we'll store the set of fully resolved payments here.
htlcs_resolved_to_user: HashSet<SentHTLCId>,

/// The set of inbound payments for which the user has processed an [`Event::PaymentClaimed`].
/// This is used to avoid regenerating the event redundantly on restart for closed channels.
inbound_payments_claimed: HashSet<PaymentHash>,

/// The set of `SpendableOutput` events which we have already passed upstream to be claimed.
/// These are tracked explicitly to ensure that we don't generate the same events redundantly
/// if users duplicatively confirm old transactions. Specifically for transactions claiming a
Expand DownExpand Up@@ -1755,6 +1774,7 @@ pub(crate) fn write_chanmon_internal<Signer: EcdsaChannelSigner, W: Writer>(
(34, channel_monitor.alternative_funding_confirmed, option),
(35, channel_monitor.is_manual_broadcast, required),
(37, channel_monitor.funding_seen_onchain, required),
(39, channel_monitor.inbound_payments_claimed, required),
});

Ok(())
Expand DownExpand Up@@ -1954,6 +1974,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {
confirmed_commitment_tx_counterparty_output: None,
htlcs_resolved_on_chain: Vec::new(),
htlcs_resolved_to_user: new_hash_set(),
inbound_payments_claimed: new_hash_set(),
spendable_txids_confirmed: Vec::new(),

best_block,
Expand DownExpand Up@@ -3249,6 +3270,20 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {

pub(crate) fn get_stored_preimages(

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure if we want to also rename this method

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yea, for sure.

&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
let inner = self.inner.lock().unwrap();

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, can we do this on a per-PaymentClaimDetails basis instead? In theory we can have two payments with the same hash/preimage.

inner
.payment_preimages
.iter()
.filter(|(hash, _)| !inner.inbound_payments_claimed.contains(*hash))
.map(|(hash, value)| (*hash, value.clone()))
.collect()
}

/// Used in tests to verify preimage propagation.
#[cfg(test)]
pub(crate) fn test_get_all_stored_preimages(
&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
self.inner.lock().unwrap().payment_preimages.clone()
}
Expand DownExpand Up@@ -4150,6 +4185,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
assert_eq!(updates.updates.len(), 1);
match updates.updates[0] {
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
// We should have already seen a `ChannelForceClosed` update if we're trying to
// provide a preimage at this point.
Expand DownExpand Up@@ -4281,6 +4317,10 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
log_trace!(logger, "HTLC {htlc:?} permanently and fully resolved");
self.htlcs_resolved_to_user.insert(*htlc);
},
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash } => {
log_trace!(logger, "Inbound payment {} claimed", payment_hash);
self.inbound_payments_claimed.insert(*payment_hash);
},
}
}

Expand DownExpand Up@@ -4313,6 +4353,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
ChannelMonitorUpdateStep::PaymentPreimage { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
}
}

Expand DownExpand Up@@ -6504,6 +6545,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
let mut funding_spend_confirmed = None;
let mut htlcs_resolved_on_chain = Some(Vec::new());
let mut htlcs_resolved_to_user = Some(new_hash_set());
let mut inbound_payments_claimed = Some(new_hash_set());
let mut funding_spend_seen = Some(false);
let mut counterparty_node_id = None;
let mut confirmed_commitment_tx_counterparty_output = None;
Expand DownExpand Up@@ -6543,6 +6585,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
(34, alternative_funding_confirmed, option),
(35, is_manual_broadcast, (default_value, false)),
(37, funding_seen_onchain, (default_value, true)),
(39, inbound_payments_claimed, option),

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assuming that write as required but read as option is intentional to be forwards compatible for old monitors?

});
// Note that `payment_preimages_with_info` was added (and is always written) in LDK 0.1, so
// we can use it to determine if this monitor was last written by LDK 0.1 or later.
Expand DownExpand Up@@ -6708,6 +6751,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
confirmed_commitment_tx_counterparty_output,
htlcs_resolved_on_chain: htlcs_resolved_on_chain.unwrap(),
htlcs_resolved_to_user: htlcs_resolved_to_user.unwrap(),
inbound_payments_claimed: inbound_payments_claimed.unwrap(),
spendable_txids_confirmed: spendable_txids_confirmed.unwrap(),

best_block,
Expand Down
1 change: 1 addition & 0 deletions lightning/src/ln/chanmon_update_fail_tests.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -4598,6 +4598,7 @@ fn test_claim_to_closed_channel_blocks_claimed_event() {
// available.
nodes[1].chain_monitor.complete_sole_pending_chan_update(&chan_a.2);
expect_payment_claimed!(nodes[1], payment_hash, 1_000_000);
check_added_monitors(&nodes[1], 1);
}

#[test]
Expand Down
176 changes: 125 additions & 51 deletions lightning/src/ln/channelmanager.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -1475,6 +1475,21 @@ impl_writeable_tlv_based!(PaymentCompleteUpdate, {
(7, htlc_id, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) struct InboundPaymentClaimedUpdate {
pub counterparty_node_id: PublicKey,
pub channel_funding_outpoint: OutPoint,
pub channel_id: ChannelId,
pub payment_hash: PaymentHash,
}

impl_writeable_tlv_based!(InboundPaymentClaimedUpdate, {
(1, counterparty_node_id, required),
(3, channel_funding_outpoint, required),
(5, channel_id, required),
(7, payment_hash, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) enum EventCompletionAction {
ReleaseRAAChannelMonitorUpdate {
Expand All@@ -1489,6 +1504,12 @@ pub(crate) enum EventCompletionAction {
/// fully-resolved in the [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.2!
ReleasePaymentCompleteChannelMonitorUpdate(PaymentCompleteUpdate),

/// When a payment's resolution is communicated to the downstream logic via
/// [`Event::PaymentClaimed`], we may want to mark the payment as fully-resolved in the
/// [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.3!
InboundPaymentClaimedChannelMonitorUpdate(InboundPaymentClaimedUpdate),
}
impl_writeable_tlv_based_enum!(EventCompletionAction,
(0, ReleaseRAAChannelMonitorUpdate) => {
Expand All@@ -1500,8 +1521,9 @@ impl_writeable_tlv_based_enum!(EventCompletionAction,
}
ChannelId::v1_from_funding_outpoint(channel_funding_outpoint.unwrap())
})),
}
},
{1, ReleasePaymentCompleteChannelMonitorUpdate} => (),
{3, InboundPaymentClaimedChannelMonitorUpdate} => (),
);

/// The source argument which is passed to [`ChannelManager::claim_mpp_part`].
Expand DownExpand Up@@ -9982,11 +10004,34 @@ This indicates a bug inside LDK. Please report this error at https://github.com/
let action = if let Some((outpoint, counterparty_node_id, channel_id)) =
durable_preimage_channel
{
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
let per_peer_state = self.per_peer_state.read().unwrap();
let is_channel_closed = per_peer_state
.get(&counterparty_node_id)
.map(|peer_state_mutex| {
let peer_state = peer_state_mutex.lock().unwrap();
!peer_state.channel_by_id.contains_key(&channel_id)
})
.unwrap_or(true);
// For open channels, we use ReleaseRAAChannelMonitorUpdate to maintain the blocking
// behavior (RAA updates are blocked until the PaymentClaimed event is handled).
// For closed channels, we use InboundPaymentClaimedChannelMonitorUpdate to persist
// that the PaymentClaimed event has been handled, preventing regeneration on restart.
Comment on lines +10017 to +10018

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

perhaps too edge-casey to worry about(?): durable_preimage_channel is picked as the last MPP channel, if this happens to be open and another one is closed do we still run into the duplicate events issue?

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a good point. It's tricky to fix, unfortunately, since we only have the OutPoint for the durable channel and we need that field to support downgrades to 0.1-. If we went for a more robust fix here and figured out backwards compat to persist outpoints for all channels, it seems like the simplest way would be to always issue this new monitor update for every MPP part when the event is processed, which is kind of annoying.

Since this fix is already not fully robust, only an improvement on the previous situation, my preference would be to just keep it as-is at least for now.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

and we need that field to support downgrades to 0.1

Was wondering if this is still supported, bc there's a comment about using htlcs instead once we don't. Happy to leave as-is 👌

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, yeah, I mean if people feel like this fix is too narrow and we should just accept redundant events until the channel is archived, I could honestly get behind that as well.

if is_channel_closed {

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I went with only generating these new monitor updates for claims on closed channels. So after #4462 we will still potentially have increased redundant PaymentClaimed events on restart for claims on open channels, until the claim is removed from all unrevoked commit txs. The approach is currently simple so I'm not sure it's worth fixing that, but open to thoughts.

Some(EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
channel_funding_outpoint: outpoint,
counterparty_node_id,
channel_id,
payment_hash,
},
))
} else {
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
}
} else {
None
};
Expand DownExpand Up@@ -14809,56 +14854,85 @@ impl<
htlc_id,
},
) => {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![ChannelMonitorUpdateStep::ReleasePaymentComplete {
htlc: htlc_id,
}],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: channel_funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
channel_funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
let update_step =
ChannelMonitorUpdateStep::ReleasePaymentComplete { htlc: htlc_id };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
counterparty_node_id,
channel_funding_outpoint,
channel_id,
payment_hash,
},
) => {
let update_step =
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
}
}
}

/// Helper for handling closed-channel monitor updates triggered by [`EventCompletionAction`]s.
fn handle_closed_channel_monitor_update_for_event(
&self, counterparty_node_id: PublicKey, funding_outpoint: OutPoint, channel_id: ChannelId,
update_step: ChannelMonitorUpdateStep,
) {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![update_step],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
}
/// Processes any events asynchronously in the order they were generated since the last call
/// using the given event handler.
///
Expand Down
Loading
Loading
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix"); } } catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
44 changes: 44 additions & 0 deletions lightning/src/chain/channelmonitor.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -706,6 +706,17 @@ pub(crate) enum ChannelMonitorUpdateStep {
ReleasePaymentComplete {
htlc: SentHTLCId,
},
/// When an [`Event::PaymentClaimed`] is processed by the user, we need to track that so we don't
/// keep regenerating the event redundantly on startup.
///
/// This will remove the HTLC from [`ChannelMonitor::get_stored_preimages`].
///
/// Note that this is only generated for closed channels -- if the channel is open, the inbound
/// payment is pruned automatically when the HTLC is no longer present in any unrevoked
/// commitment transaction.
InboundPaymentClaimed {
payment_hash: PaymentHash,
},
}

impl ChannelMonitorUpdateStep {
Expand All@@ -723,6 +734,7 @@ impl ChannelMonitorUpdateStep {
ChannelMonitorUpdateStep::RenegotiatedFunding { .. } => "RenegotiatedFunding",
ChannelMonitorUpdateStep::RenegotiatedFundingLocked { .. } => "RenegotiatedFundingLocked",
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => "ReleasePaymentComplete",
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => "InboundPaymentClaimed",
}
}
}
Expand DownExpand Up@@ -769,6 +781,9 @@ impl_writeable_tlv_based_enum_upgradable!(ChannelMonitorUpdateStep,
(3, htlc_data, required),
(5, claimed_htlcs, required_vec),
},
(9, InboundPaymentClaimed) => {
(1, payment_hash, required),
},
(10, RenegotiatedFunding) => {
(1, channel_parameters, (required: ReadableArgs, None)),
(3, holder_commitment_tx, required),
Expand DownExpand Up@@ -1342,6 +1357,10 @@ pub(crate) struct ChannelMonitorImpl<Signer: EcdsaChannelSigner> {
/// this and we'll store the set of fully resolved payments here.
htlcs_resolved_to_user: HashSet<SentHTLCId>,

/// The set of inbound payments for which the user has processed an [`Event::PaymentClaimed`].
/// This is used to avoid regenerating the event redundantly on restart for closed channels.
inbound_payments_claimed: HashSet<PaymentHash>,

/// The set of `SpendableOutput` events which we have already passed upstream to be claimed.
/// These are tracked explicitly to ensure that we don't generate the same events redundantly
/// if users duplicatively confirm old transactions. Specifically for transactions claiming a
Expand DownExpand Up@@ -1755,6 +1774,7 @@ pub(crate) fn write_chanmon_internal<Signer: EcdsaChannelSigner, W: Writer>(
(34, channel_monitor.alternative_funding_confirmed, option),
(35, channel_monitor.is_manual_broadcast, required),
(37, channel_monitor.funding_seen_onchain, required),
(39, channel_monitor.inbound_payments_claimed, required),
});

Ok(())
Expand DownExpand Up@@ -1954,6 +1974,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {
confirmed_commitment_tx_counterparty_output: None,
htlcs_resolved_on_chain: Vec::new(),
htlcs_resolved_to_user: new_hash_set(),
inbound_payments_claimed: new_hash_set(),
spendable_txids_confirmed: Vec::new(),

best_block,
Expand DownExpand Up@@ -3249,6 +3270,20 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {

pub(crate) fn get_stored_preimages(

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure if we want to also rename this method

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yea, for sure.

&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
let inner = self.inner.lock().unwrap();

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, can we do this on a per-PaymentClaimDetails basis instead? In theory we can have two payments with the same hash/preimage.

inner
.payment_preimages
.iter()
.filter(|(hash, _)| !inner.inbound_payments_claimed.contains(*hash))
.map(|(hash, value)| (*hash, value.clone()))
.collect()
}

/// Used in tests to verify preimage propagation.
#[cfg(test)]
pub(crate) fn test_get_all_stored_preimages(
&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
self.inner.lock().unwrap().payment_preimages.clone()
}
Expand DownExpand Up@@ -4150,6 +4185,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
assert_eq!(updates.updates.len(), 1);
match updates.updates[0] {
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
// We should have already seen a `ChannelForceClosed` update if we're trying to
// provide a preimage at this point.
Expand DownExpand Up@@ -4281,6 +4317,10 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
log_trace!(logger, "HTLC {htlc:?} permanently and fully resolved");
self.htlcs_resolved_to_user.insert(*htlc);
},
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash } => {
log_trace!(logger, "Inbound payment {} claimed", payment_hash);
self.inbound_payments_claimed.insert(*payment_hash);
},
}
}

Expand DownExpand Up@@ -4313,6 +4353,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
ChannelMonitorUpdateStep::PaymentPreimage { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
}
}

Expand DownExpand Up@@ -6504,6 +6545,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
let mut funding_spend_confirmed = None;
let mut htlcs_resolved_on_chain = Some(Vec::new());
let mut htlcs_resolved_to_user = Some(new_hash_set());
let mut inbound_payments_claimed = Some(new_hash_set());
let mut funding_spend_seen = Some(false);
let mut counterparty_node_id = None;
let mut confirmed_commitment_tx_counterparty_output = None;
Expand DownExpand Up@@ -6543,6 +6585,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
(34, alternative_funding_confirmed, option),
(35, is_manual_broadcast, (default_value, false)),
(37, funding_seen_onchain, (default_value, true)),
(39, inbound_payments_claimed, option),

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assuming that write as required but read as option is intentional to be forwards compatible for old monitors?

});
// Note that `payment_preimages_with_info` was added (and is always written) in LDK 0.1, so
// we can use it to determine if this monitor was last written by LDK 0.1 or later.
Expand DownExpand Up@@ -6708,6 +6751,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
confirmed_commitment_tx_counterparty_output,
htlcs_resolved_on_chain: htlcs_resolved_on_chain.unwrap(),
htlcs_resolved_to_user: htlcs_resolved_to_user.unwrap(),
inbound_payments_claimed: inbound_payments_claimed.unwrap(),
spendable_txids_confirmed: spendable_txids_confirmed.unwrap(),

best_block,
Expand Down
1 change: 1 addition & 0 deletions lightning/src/ln/chanmon_update_fail_tests.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -4598,6 +4598,7 @@ fn test_claim_to_closed_channel_blocks_claimed_event() {
// available.
nodes[1].chain_monitor.complete_sole_pending_chan_update(&chan_a.2);
expect_payment_claimed!(nodes[1], payment_hash, 1_000_000);
check_added_monitors(&nodes[1], 1);
}

#[test]
Expand Down
176 changes: 125 additions & 51 deletions lightning/src/ln/channelmanager.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -1475,6 +1475,21 @@ impl_writeable_tlv_based!(PaymentCompleteUpdate, {
(7, htlc_id, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) struct InboundPaymentClaimedUpdate {
pub counterparty_node_id: PublicKey,
pub channel_funding_outpoint: OutPoint,
pub channel_id: ChannelId,
pub payment_hash: PaymentHash,
}

impl_writeable_tlv_based!(InboundPaymentClaimedUpdate, {
(1, counterparty_node_id, required),
(3, channel_funding_outpoint, required),
(5, channel_id, required),
(7, payment_hash, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) enum EventCompletionAction {
ReleaseRAAChannelMonitorUpdate {
Expand All@@ -1489,6 +1504,12 @@ pub(crate) enum EventCompletionAction {
/// fully-resolved in the [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.2!
ReleasePaymentCompleteChannelMonitorUpdate(PaymentCompleteUpdate),

/// When a payment's resolution is communicated to the downstream logic via
/// [`Event::PaymentClaimed`], we may want to mark the payment as fully-resolved in the
/// [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.3!
InboundPaymentClaimedChannelMonitorUpdate(InboundPaymentClaimedUpdate),
}
impl_writeable_tlv_based_enum!(EventCompletionAction,
(0, ReleaseRAAChannelMonitorUpdate) => {
Expand All@@ -1500,8 +1521,9 @@ impl_writeable_tlv_based_enum!(EventCompletionAction,
}
ChannelId::v1_from_funding_outpoint(channel_funding_outpoint.unwrap())
})),
}
},
{1, ReleasePaymentCompleteChannelMonitorUpdate} => (),
{3, InboundPaymentClaimedChannelMonitorUpdate} => (),
);

/// The source argument which is passed to [`ChannelManager::claim_mpp_part`].
Expand DownExpand Up@@ -9982,11 +10004,34 @@ This indicates a bug inside LDK. Please report this error at https://github.com/
let action = if let Some((outpoint, counterparty_node_id, channel_id)) =
durable_preimage_channel
{
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
let per_peer_state = self.per_peer_state.read().unwrap();
let is_channel_closed = per_peer_state
.get(&counterparty_node_id)
.map(|peer_state_mutex| {
let peer_state = peer_state_mutex.lock().unwrap();
!peer_state.channel_by_id.contains_key(&channel_id)
})
.unwrap_or(true);
// For open channels, we use ReleaseRAAChannelMonitorUpdate to maintain the blocking
// behavior (RAA updates are blocked until the PaymentClaimed event is handled).
// For closed channels, we use InboundPaymentClaimedChannelMonitorUpdate to persist
// that the PaymentClaimed event has been handled, preventing regeneration on restart.
Comment on lines +10017 to +10018

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

perhaps too edge-casey to worry about(?): durable_preimage_channel is picked as the last MPP channel, if this happens to be open and another one is closed do we still run into the duplicate events issue?

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a good point. It's tricky to fix, unfortunately, since we only have the OutPoint for the durable channel and we need that field to support downgrades to 0.1-. If we went for a more robust fix here and figured out backwards compat to persist outpoints for all channels, it seems like the simplest way would be to always issue this new monitor update for every MPP part when the event is processed, which is kind of annoying.

Since this fix is already not fully robust, only an improvement on the previous situation, my preference would be to just keep it as-is at least for now.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

and we need that field to support downgrades to 0.1

Was wondering if this is still supported, bc there's a comment about using htlcs instead once we don't. Happy to leave as-is 👌

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, yeah, I mean if people feel like this fix is too narrow and we should just accept redundant events until the channel is archived, I could honestly get behind that as well.

if is_channel_closed {

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I went with only generating these new monitor updates for claims on closed channels. So after #4462 we will still potentially have increased redundant PaymentClaimed events on restart for claims on open channels, until the claim is removed from all unrevoked commit txs. The approach is currently simple so I'm not sure it's worth fixing that, but open to thoughts.

Some(EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
channel_funding_outpoint: outpoint,
counterparty_node_id,
channel_id,
payment_hash,
},
))
} else {
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
}
} else {
None
};
Expand DownExpand Up@@ -14809,56 +14854,85 @@ impl<
htlc_id,
},
) => {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![ChannelMonitorUpdateStep::ReleasePaymentComplete {
htlc: htlc_id,
}],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: channel_funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
channel_funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
let update_step =
ChannelMonitorUpdateStep::ReleasePaymentComplete { htlc: htlc_id };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
counterparty_node_id,
channel_funding_outpoint,
channel_id,
payment_hash,
},
) => {
let update_step =
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
}
}
}

/// Helper for handling closed-channel monitor updates triggered by [`EventCompletionAction`]s.
fn handle_closed_channel_monitor_update_for_event(
&self, counterparty_node_id: PublicKey, funding_outpoint: OutPoint, channel_id: ChannelId,
update_step: ChannelMonitorUpdateStep,
) {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![update_step],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
}
/// Processes any events asynchronously in the order they were generated since the last call
/// using the given event handler.
///
Expand Down
Loading
Loading
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms"); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
44 changes: 44 additions & 0 deletions lightning/src/chain/channelmonitor.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -706,6 +706,17 @@ pub(crate) enum ChannelMonitorUpdateStep {
ReleasePaymentComplete {
htlc: SentHTLCId,
},
/// When an [`Event::PaymentClaimed`] is processed by the user, we need to track that so we don't
/// keep regenerating the event redundantly on startup.
///
/// This will remove the HTLC from [`ChannelMonitor::get_stored_preimages`].
///
/// Note that this is only generated for closed channels -- if the channel is open, the inbound
/// payment is pruned automatically when the HTLC is no longer present in any unrevoked
/// commitment transaction.
InboundPaymentClaimed {
payment_hash: PaymentHash,
},
}

impl ChannelMonitorUpdateStep {
Expand All@@ -723,6 +734,7 @@ impl ChannelMonitorUpdateStep {
ChannelMonitorUpdateStep::RenegotiatedFunding { .. } => "RenegotiatedFunding",
ChannelMonitorUpdateStep::RenegotiatedFundingLocked { .. } => "RenegotiatedFundingLocked",
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => "ReleasePaymentComplete",
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => "InboundPaymentClaimed",
}
}
}
Expand DownExpand Up@@ -769,6 +781,9 @@ impl_writeable_tlv_based_enum_upgradable!(ChannelMonitorUpdateStep,
(3, htlc_data, required),
(5, claimed_htlcs, required_vec),
},
(9, InboundPaymentClaimed) => {
(1, payment_hash, required),
},
(10, RenegotiatedFunding) => {
(1, channel_parameters, (required: ReadableArgs, None)),
(3, holder_commitment_tx, required),
Expand DownExpand Up@@ -1342,6 +1357,10 @@ pub(crate) struct ChannelMonitorImpl<Signer: EcdsaChannelSigner> {
/// this and we'll store the set of fully resolved payments here.
htlcs_resolved_to_user: HashSet<SentHTLCId>,

/// The set of inbound payments for which the user has processed an [`Event::PaymentClaimed`].
/// This is used to avoid regenerating the event redundantly on restart for closed channels.
inbound_payments_claimed: HashSet<PaymentHash>,

/// The set of `SpendableOutput` events which we have already passed upstream to be claimed.
/// These are tracked explicitly to ensure that we don't generate the same events redundantly
/// if users duplicatively confirm old transactions. Specifically for transactions claiming a
Expand DownExpand Up@@ -1755,6 +1774,7 @@ pub(crate) fn write_chanmon_internal<Signer: EcdsaChannelSigner, W: Writer>(
(34, channel_monitor.alternative_funding_confirmed, option),
(35, channel_monitor.is_manual_broadcast, required),
(37, channel_monitor.funding_seen_onchain, required),
(39, channel_monitor.inbound_payments_claimed, required),
});

Ok(())
Expand DownExpand Up@@ -1954,6 +1974,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {
confirmed_commitment_tx_counterparty_output: None,
htlcs_resolved_on_chain: Vec::new(),
htlcs_resolved_to_user: new_hash_set(),
inbound_payments_claimed: new_hash_set(),
spendable_txids_confirmed: Vec::new(),

best_block,
Expand DownExpand Up@@ -3249,6 +3270,20 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {

pub(crate) fn get_stored_preimages(

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure if we want to also rename this method

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yea, for sure.

&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
let inner = self.inner.lock().unwrap();

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, can we do this on a per-PaymentClaimDetails basis instead? In theory we can have two payments with the same hash/preimage.

inner
.payment_preimages
.iter()
.filter(|(hash, _)| !inner.inbound_payments_claimed.contains(*hash))
.map(|(hash, value)| (*hash, value.clone()))
.collect()
}

/// Used in tests to verify preimage propagation.
#[cfg(test)]
pub(crate) fn test_get_all_stored_preimages(
&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
self.inner.lock().unwrap().payment_preimages.clone()
}
Expand DownExpand Up@@ -4150,6 +4185,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
assert_eq!(updates.updates.len(), 1);
match updates.updates[0] {
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
// We should have already seen a `ChannelForceClosed` update if we're trying to
// provide a preimage at this point.
Expand DownExpand Up@@ -4281,6 +4317,10 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
log_trace!(logger, "HTLC {htlc:?} permanently and fully resolved");
self.htlcs_resolved_to_user.insert(*htlc);
},
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash } => {
log_trace!(logger, "Inbound payment {} claimed", payment_hash);
self.inbound_payments_claimed.insert(*payment_hash);
},
}
}

Expand DownExpand Up@@ -4313,6 +4353,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
ChannelMonitorUpdateStep::PaymentPreimage { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
}
}

Expand DownExpand Up@@ -6504,6 +6545,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
let mut funding_spend_confirmed = None;
let mut htlcs_resolved_on_chain = Some(Vec::new());
let mut htlcs_resolved_to_user = Some(new_hash_set());
let mut inbound_payments_claimed = Some(new_hash_set());
let mut funding_spend_seen = Some(false);
let mut counterparty_node_id = None;
let mut confirmed_commitment_tx_counterparty_output = None;
Expand DownExpand Up@@ -6543,6 +6585,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
(34, alternative_funding_confirmed, option),
(35, is_manual_broadcast, (default_value, false)),
(37, funding_seen_onchain, (default_value, true)),
(39, inbound_payments_claimed, option),

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assuming that write as required but read as option is intentional to be forwards compatible for old monitors?

});
// Note that `payment_preimages_with_info` was added (and is always written) in LDK 0.1, so
// we can use it to determine if this monitor was last written by LDK 0.1 or later.
Expand DownExpand Up@@ -6708,6 +6751,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
confirmed_commitment_tx_counterparty_output,
htlcs_resolved_on_chain: htlcs_resolved_on_chain.unwrap(),
htlcs_resolved_to_user: htlcs_resolved_to_user.unwrap(),
inbound_payments_claimed: inbound_payments_claimed.unwrap(),
spendable_txids_confirmed: spendable_txids_confirmed.unwrap(),

best_block,
Expand Down
1 change: 1 addition & 0 deletions lightning/src/ln/chanmon_update_fail_tests.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -4598,6 +4598,7 @@ fn test_claim_to_closed_channel_blocks_claimed_event() {
// available.
nodes[1].chain_monitor.complete_sole_pending_chan_update(&chan_a.2);
expect_payment_claimed!(nodes[1], payment_hash, 1_000_000);
check_added_monitors(&nodes[1], 1);
}

#[test]
Expand Down
176 changes: 125 additions & 51 deletions lightning/src/ln/channelmanager.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -1475,6 +1475,21 @@ impl_writeable_tlv_based!(PaymentCompleteUpdate, {
(7, htlc_id, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) struct InboundPaymentClaimedUpdate {
pub counterparty_node_id: PublicKey,
pub channel_funding_outpoint: OutPoint,
pub channel_id: ChannelId,
pub payment_hash: PaymentHash,
}

impl_writeable_tlv_based!(InboundPaymentClaimedUpdate, {
(1, counterparty_node_id, required),
(3, channel_funding_outpoint, required),
(5, channel_id, required),
(7, payment_hash, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) enum EventCompletionAction {
ReleaseRAAChannelMonitorUpdate {
Expand All@@ -1489,6 +1504,12 @@ pub(crate) enum EventCompletionAction {
/// fully-resolved in the [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.2!
ReleasePaymentCompleteChannelMonitorUpdate(PaymentCompleteUpdate),

/// When a payment's resolution is communicated to the downstream logic via
/// [`Event::PaymentClaimed`], we may want to mark the payment as fully-resolved in the
/// [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.3!
InboundPaymentClaimedChannelMonitorUpdate(InboundPaymentClaimedUpdate),
}
impl_writeable_tlv_based_enum!(EventCompletionAction,
(0, ReleaseRAAChannelMonitorUpdate) => {
Expand All@@ -1500,8 +1521,9 @@ impl_writeable_tlv_based_enum!(EventCompletionAction,
}
ChannelId::v1_from_funding_outpoint(channel_funding_outpoint.unwrap())
})),
}
},
{1, ReleasePaymentCompleteChannelMonitorUpdate} => (),
{3, InboundPaymentClaimedChannelMonitorUpdate} => (),
);

/// The source argument which is passed to [`ChannelManager::claim_mpp_part`].
Expand DownExpand Up@@ -9982,11 +10004,34 @@ This indicates a bug inside LDK. Please report this error at https://github.com/
let action = if let Some((outpoint, counterparty_node_id, channel_id)) =
durable_preimage_channel
{
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
let per_peer_state = self.per_peer_state.read().unwrap();
let is_channel_closed = per_peer_state
.get(&counterparty_node_id)
.map(|peer_state_mutex| {
let peer_state = peer_state_mutex.lock().unwrap();
!peer_state.channel_by_id.contains_key(&channel_id)
})
.unwrap_or(true);
// For open channels, we use ReleaseRAAChannelMonitorUpdate to maintain the blocking
// behavior (RAA updates are blocked until the PaymentClaimed event is handled).
// For closed channels, we use InboundPaymentClaimedChannelMonitorUpdate to persist
// that the PaymentClaimed event has been handled, preventing regeneration on restart.
Comment on lines +10017 to +10018

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

perhaps too edge-casey to worry about(?): durable_preimage_channel is picked as the last MPP channel, if this happens to be open and another one is closed do we still run into the duplicate events issue?

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a good point. It's tricky to fix, unfortunately, since we only have the OutPoint for the durable channel and we need that field to support downgrades to 0.1-. If we went for a more robust fix here and figured out backwards compat to persist outpoints for all channels, it seems like the simplest way would be to always issue this new monitor update for every MPP part when the event is processed, which is kind of annoying.

Since this fix is already not fully robust, only an improvement on the previous situation, my preference would be to just keep it as-is at least for now.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

and we need that field to support downgrades to 0.1

Was wondering if this is still supported, bc there's a comment about using htlcs instead once we don't. Happy to leave as-is 👌

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, yeah, I mean if people feel like this fix is too narrow and we should just accept redundant events until the channel is archived, I could honestly get behind that as well.

if is_channel_closed {

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I went with only generating these new monitor updates for claims on closed channels. So after #4462 we will still potentially have increased redundant PaymentClaimed events on restart for claims on open channels, until the claim is removed from all unrevoked commit txs. The approach is currently simple so I'm not sure it's worth fixing that, but open to thoughts.

Some(EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
channel_funding_outpoint: outpoint,
counterparty_node_id,
channel_id,
payment_hash,
},
))
} else {
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
}
} else {
None
};
Expand DownExpand Up@@ -14809,56 +14854,85 @@ impl<
htlc_id,
},
) => {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![ChannelMonitorUpdateStep::ReleasePaymentComplete {
htlc: htlc_id,
}],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: channel_funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
channel_funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
let update_step =
ChannelMonitorUpdateStep::ReleasePaymentComplete { htlc: htlc_id };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
counterparty_node_id,
channel_funding_outpoint,
channel_id,
payment_hash,
},
) => {
let update_step =
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
}
}
}

/// Helper for handling closed-channel monitor updates triggered by [`EventCompletionAction`]s.
fn handle_closed_channel_monitor_update_for_event(
&self, counterparty_node_id: PublicKey, funding_outpoint: OutPoint, channel_id: ChannelId,
update_step: ChannelMonitorUpdateStep,
) {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![update_step],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
}
/// Processes any events asynchronously in the order they were generated since the last call
/// using the given event handler.
///
Expand Down
Loading
Loading
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links"); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + '
Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
44 changes: 44 additions & 0 deletions lightning/src/chain/channelmonitor.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -706,6 +706,17 @@ pub(crate) enum ChannelMonitorUpdateStep {
ReleasePaymentComplete {
htlc: SentHTLCId,
},
/// When an [`Event::PaymentClaimed`] is processed by the user, we need to track that so we don't
/// keep regenerating the event redundantly on startup.
///
/// This will remove the HTLC from [`ChannelMonitor::get_stored_preimages`].
///
/// Note that this is only generated for closed channels -- if the channel is open, the inbound
/// payment is pruned automatically when the HTLC is no longer present in any unrevoked
/// commitment transaction.
InboundPaymentClaimed {
payment_hash: PaymentHash,
},
}

impl ChannelMonitorUpdateStep {
Expand All@@ -723,6 +734,7 @@ impl ChannelMonitorUpdateStep {
ChannelMonitorUpdateStep::RenegotiatedFunding { .. } => "RenegotiatedFunding",
ChannelMonitorUpdateStep::RenegotiatedFundingLocked { .. } => "RenegotiatedFundingLocked",
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => "ReleasePaymentComplete",
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => "InboundPaymentClaimed",
}
}
}
Expand DownExpand Up@@ -769,6 +781,9 @@ impl_writeable_tlv_based_enum_upgradable!(ChannelMonitorUpdateStep,
(3, htlc_data, required),
(5, claimed_htlcs, required_vec),
},
(9, InboundPaymentClaimed) => {
(1, payment_hash, required),
},
(10, RenegotiatedFunding) => {
(1, channel_parameters, (required: ReadableArgs, None)),
(3, holder_commitment_tx, required),
Expand DownExpand Up@@ -1342,6 +1357,10 @@ pub(crate) struct ChannelMonitorImpl<Signer: EcdsaChannelSigner> {
/// this and we'll store the set of fully resolved payments here.
htlcs_resolved_to_user: HashSet<SentHTLCId>,

/// The set of inbound payments for which the user has processed an [`Event::PaymentClaimed`].
/// This is used to avoid regenerating the event redundantly on restart for closed channels.
inbound_payments_claimed: HashSet<PaymentHash>,

/// The set of `SpendableOutput` events which we have already passed upstream to be claimed.
/// These are tracked explicitly to ensure that we don't generate the same events redundantly
/// if users duplicatively confirm old transactions. Specifically for transactions claiming a
Expand DownExpand Up@@ -1755,6 +1774,7 @@ pub(crate) fn write_chanmon_internal<Signer: EcdsaChannelSigner, W: Writer>(
(34, channel_monitor.alternative_funding_confirmed, option),
(35, channel_monitor.is_manual_broadcast, required),
(37, channel_monitor.funding_seen_onchain, required),
(39, channel_monitor.inbound_payments_claimed, required),
});

Ok(())
Expand DownExpand Up@@ -1954,6 +1974,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {
confirmed_commitment_tx_counterparty_output: None,
htlcs_resolved_on_chain: Vec::new(),
htlcs_resolved_to_user: new_hash_set(),
inbound_payments_claimed: new_hash_set(),
spendable_txids_confirmed: Vec::new(),

best_block,
Expand DownExpand Up@@ -3249,6 +3270,20 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {

pub(crate) fn get_stored_preimages(

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure if we want to also rename this method

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yea, for sure.

&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
let inner = self.inner.lock().unwrap();

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, can we do this on a per-PaymentClaimDetails basis instead? In theory we can have two payments with the same hash/preimage.

inner
.payment_preimages
.iter()
.filter(|(hash, _)| !inner.inbound_payments_claimed.contains(*hash))
.map(|(hash, value)| (*hash, value.clone()))
.collect()
}

/// Used in tests to verify preimage propagation.
#[cfg(test)]
pub(crate) fn test_get_all_stored_preimages(
&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
self.inner.lock().unwrap().payment_preimages.clone()
}
Expand DownExpand Up@@ -4150,6 +4185,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
assert_eq!(updates.updates.len(), 1);
match updates.updates[0] {
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
// We should have already seen a `ChannelForceClosed` update if we're trying to
// provide a preimage at this point.
Expand DownExpand Up@@ -4281,6 +4317,10 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
log_trace!(logger, "HTLC {htlc:?} permanently and fully resolved");
self.htlcs_resolved_to_user.insert(*htlc);
},
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash } => {
log_trace!(logger, "Inbound payment {} claimed", payment_hash);
self.inbound_payments_claimed.insert(*payment_hash);
},
}
}

Expand DownExpand Up@@ -4313,6 +4353,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
ChannelMonitorUpdateStep::PaymentPreimage { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
}
}

Expand DownExpand Up@@ -6504,6 +6545,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
let mut funding_spend_confirmed = None;
let mut htlcs_resolved_on_chain = Some(Vec::new());
let mut htlcs_resolved_to_user = Some(new_hash_set());
let mut inbound_payments_claimed = Some(new_hash_set());
let mut funding_spend_seen = Some(false);
let mut counterparty_node_id = None;
let mut confirmed_commitment_tx_counterparty_output = None;
Expand DownExpand Up@@ -6543,6 +6585,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
(34, alternative_funding_confirmed, option),
(35, is_manual_broadcast, (default_value, false)),
(37, funding_seen_onchain, (default_value, true)),
(39, inbound_payments_claimed, option),

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assuming that write as required but read as option is intentional to be forwards compatible for old monitors?

});
// Note that `payment_preimages_with_info` was added (and is always written) in LDK 0.1, so
// we can use it to determine if this monitor was last written by LDK 0.1 or later.
Expand DownExpand Up@@ -6708,6 +6751,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
confirmed_commitment_tx_counterparty_output,
htlcs_resolved_on_chain: htlcs_resolved_on_chain.unwrap(),
htlcs_resolved_to_user: htlcs_resolved_to_user.unwrap(),
inbound_payments_claimed: inbound_payments_claimed.unwrap(),
spendable_txids_confirmed: spendable_txids_confirmed.unwrap(),

best_block,
Expand Down
1 change: 1 addition & 0 deletions lightning/src/ln/chanmon_update_fail_tests.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -4598,6 +4598,7 @@ fn test_claim_to_closed_channel_blocks_claimed_event() {
// available.
nodes[1].chain_monitor.complete_sole_pending_chan_update(&chan_a.2);
expect_payment_claimed!(nodes[1], payment_hash, 1_000_000);
check_added_monitors(&nodes[1], 1);
}

#[test]
Expand Down
176 changes: 125 additions & 51 deletions lightning/src/ln/channelmanager.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -1475,6 +1475,21 @@ impl_writeable_tlv_based!(PaymentCompleteUpdate, {
(7, htlc_id, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) struct InboundPaymentClaimedUpdate {
pub counterparty_node_id: PublicKey,
pub channel_funding_outpoint: OutPoint,
pub channel_id: ChannelId,
pub payment_hash: PaymentHash,
}

impl_writeable_tlv_based!(InboundPaymentClaimedUpdate, {
(1, counterparty_node_id, required),
(3, channel_funding_outpoint, required),
(5, channel_id, required),
(7, payment_hash, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) enum EventCompletionAction {
ReleaseRAAChannelMonitorUpdate {
Expand All@@ -1489,6 +1504,12 @@ pub(crate) enum EventCompletionAction {
/// fully-resolved in the [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.2!
ReleasePaymentCompleteChannelMonitorUpdate(PaymentCompleteUpdate),

/// When a payment's resolution is communicated to the downstream logic via
/// [`Event::PaymentClaimed`], we may want to mark the payment as fully-resolved in the
/// [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.3!
InboundPaymentClaimedChannelMonitorUpdate(InboundPaymentClaimedUpdate),
}
impl_writeable_tlv_based_enum!(EventCompletionAction,
(0, ReleaseRAAChannelMonitorUpdate) => {
Expand All@@ -1500,8 +1521,9 @@ impl_writeable_tlv_based_enum!(EventCompletionAction,
}
ChannelId::v1_from_funding_outpoint(channel_funding_outpoint.unwrap())
})),
}
},
{1, ReleasePaymentCompleteChannelMonitorUpdate} => (),
{3, InboundPaymentClaimedChannelMonitorUpdate} => (),
);

/// The source argument which is passed to [`ChannelManager::claim_mpp_part`].
Expand DownExpand Up@@ -9982,11 +10004,34 @@ This indicates a bug inside LDK. Please report this error at https://github.com/
let action = if let Some((outpoint, counterparty_node_id, channel_id)) =
durable_preimage_channel
{
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
let per_peer_state = self.per_peer_state.read().unwrap();
let is_channel_closed = per_peer_state
.get(&counterparty_node_id)
.map(|peer_state_mutex| {
let peer_state = peer_state_mutex.lock().unwrap();
!peer_state.channel_by_id.contains_key(&channel_id)
})
.unwrap_or(true);
// For open channels, we use ReleaseRAAChannelMonitorUpdate to maintain the blocking
// behavior (RAA updates are blocked until the PaymentClaimed event is handled).
// For closed channels, we use InboundPaymentClaimedChannelMonitorUpdate to persist
// that the PaymentClaimed event has been handled, preventing regeneration on restart.
Comment on lines +10017 to +10018

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

perhaps too edge-casey to worry about(?): durable_preimage_channel is picked as the last MPP channel, if this happens to be open and another one is closed do we still run into the duplicate events issue?

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a good point. It's tricky to fix, unfortunately, since we only have the OutPoint for the durable channel and we need that field to support downgrades to 0.1-. If we went for a more robust fix here and figured out backwards compat to persist outpoints for all channels, it seems like the simplest way would be to always issue this new monitor update for every MPP part when the event is processed, which is kind of annoying.

Since this fix is already not fully robust, only an improvement on the previous situation, my preference would be to just keep it as-is at least for now.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

and we need that field to support downgrades to 0.1

Was wondering if this is still supported, bc there's a comment about using htlcs instead once we don't. Happy to leave as-is 👌

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, yeah, I mean if people feel like this fix is too narrow and we should just accept redundant events until the channel is archived, I could honestly get behind that as well.

if is_channel_closed {

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I went with only generating these new monitor updates for claims on closed channels. So after #4462 we will still potentially have increased redundant PaymentClaimed events on restart for claims on open channels, until the claim is removed from all unrevoked commit txs. The approach is currently simple so I'm not sure it's worth fixing that, but open to thoughts.

Some(EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
channel_funding_outpoint: outpoint,
counterparty_node_id,
channel_id,
payment_hash,
},
))
} else {
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
}
} else {
None
};
Expand DownExpand Up@@ -14809,56 +14854,85 @@ impl<
htlc_id,
},
) => {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![ChannelMonitorUpdateStep::ReleasePaymentComplete {
htlc: htlc_id,
}],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: channel_funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
channel_funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
let update_step =
ChannelMonitorUpdateStep::ReleasePaymentComplete { htlc: htlc_id };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
counterparty_node_id,
channel_funding_outpoint,
channel_id,
payment_hash,
},
) => {
let update_step =
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
}
}
}

/// Helper for handling closed-channel monitor updates triggered by [`EventCompletionAction`]s.
fn handle_closed_channel_monitor_update_for_event(
&self, counterparty_node_id: PublicKey, funding_outpoint: OutPoint, channel_id: ChannelId,
update_step: ChannelMonitorUpdateStep,
) {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![update_step],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
}
/// Processes any events asynchronously in the order they were generated since the last call
/// using the given event handler.
///
Expand Down
Loading
Loading
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default"); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
44 changes: 44 additions & 0 deletions lightning/src/chain/channelmonitor.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -706,6 +706,17 @@ pub(crate) enum ChannelMonitorUpdateStep {
ReleasePaymentComplete {
htlc: SentHTLCId,
},
/// When an [`Event::PaymentClaimed`] is processed by the user, we need to track that so we don't
/// keep regenerating the event redundantly on startup.
///
/// This will remove the HTLC from [`ChannelMonitor::get_stored_preimages`].
///
/// Note that this is only generated for closed channels -- if the channel is open, the inbound
/// payment is pruned automatically when the HTLC is no longer present in any unrevoked
/// commitment transaction.
InboundPaymentClaimed {
payment_hash: PaymentHash,
},
}

impl ChannelMonitorUpdateStep {
Expand All@@ -723,6 +734,7 @@ impl ChannelMonitorUpdateStep {
ChannelMonitorUpdateStep::RenegotiatedFunding { .. } => "RenegotiatedFunding",
ChannelMonitorUpdateStep::RenegotiatedFundingLocked { .. } => "RenegotiatedFundingLocked",
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => "ReleasePaymentComplete",
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => "InboundPaymentClaimed",
}
}
}
Expand DownExpand Up@@ -769,6 +781,9 @@ impl_writeable_tlv_based_enum_upgradable!(ChannelMonitorUpdateStep,
(3, htlc_data, required),
(5, claimed_htlcs, required_vec),
},
(9, InboundPaymentClaimed) => {
(1, payment_hash, required),
},
(10, RenegotiatedFunding) => {
(1, channel_parameters, (required: ReadableArgs, None)),
(3, holder_commitment_tx, required),
Expand DownExpand Up@@ -1342,6 +1357,10 @@ pub(crate) struct ChannelMonitorImpl<Signer: EcdsaChannelSigner> {
/// this and we'll store the set of fully resolved payments here.
htlcs_resolved_to_user: HashSet<SentHTLCId>,

/// The set of inbound payments for which the user has processed an [`Event::PaymentClaimed`].
/// This is used to avoid regenerating the event redundantly on restart for closed channels.
inbound_payments_claimed: HashSet<PaymentHash>,

/// The set of `SpendableOutput` events which we have already passed upstream to be claimed.
/// These are tracked explicitly to ensure that we don't generate the same events redundantly
/// if users duplicatively confirm old transactions. Specifically for transactions claiming a
Expand DownExpand Up@@ -1755,6 +1774,7 @@ pub(crate) fn write_chanmon_internal<Signer: EcdsaChannelSigner, W: Writer>(
(34, channel_monitor.alternative_funding_confirmed, option),
(35, channel_monitor.is_manual_broadcast, required),
(37, channel_monitor.funding_seen_onchain, required),
(39, channel_monitor.inbound_payments_claimed, required),
});

Ok(())
Expand DownExpand Up@@ -1954,6 +1974,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {
confirmed_commitment_tx_counterparty_output: None,
htlcs_resolved_on_chain: Vec::new(),
htlcs_resolved_to_user: new_hash_set(),
inbound_payments_claimed: new_hash_set(),
spendable_txids_confirmed: Vec::new(),

best_block,
Expand DownExpand Up@@ -3249,6 +3270,20 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {

pub(crate) fn get_stored_preimages(

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure if we want to also rename this method

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yea, for sure.

&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
let inner = self.inner.lock().unwrap();

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, can we do this on a per-PaymentClaimDetails basis instead? In theory we can have two payments with the same hash/preimage.

inner
.payment_preimages
.iter()
.filter(|(hash, _)| !inner.inbound_payments_claimed.contains(*hash))
.map(|(hash, value)| (*hash, value.clone()))
.collect()
}

/// Used in tests to verify preimage propagation.
#[cfg(test)]
pub(crate) fn test_get_all_stored_preimages(
&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
self.inner.lock().unwrap().payment_preimages.clone()
}
Expand DownExpand Up@@ -4150,6 +4185,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
assert_eq!(updates.updates.len(), 1);
match updates.updates[0] {
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
// We should have already seen a `ChannelForceClosed` update if we're trying to
// provide a preimage at this point.
Expand DownExpand Up@@ -4281,6 +4317,10 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
log_trace!(logger, "HTLC {htlc:?} permanently and fully resolved");
self.htlcs_resolved_to_user.insert(*htlc);
},
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash } => {
log_trace!(logger, "Inbound payment {} claimed", payment_hash);
self.inbound_payments_claimed.insert(*payment_hash);
},
}
}

Expand DownExpand Up@@ -4313,6 +4353,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
ChannelMonitorUpdateStep::PaymentPreimage { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
}
}

Expand DownExpand Up@@ -6504,6 +6545,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
let mut funding_spend_confirmed = None;
let mut htlcs_resolved_on_chain = Some(Vec::new());
let mut htlcs_resolved_to_user = Some(new_hash_set());
let mut inbound_payments_claimed = Some(new_hash_set());
let mut funding_spend_seen = Some(false);
let mut counterparty_node_id = None;
let mut confirmed_commitment_tx_counterparty_output = None;
Expand DownExpand Up@@ -6543,6 +6585,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
(34, alternative_funding_confirmed, option),
(35, is_manual_broadcast, (default_value, false)),
(37, funding_seen_onchain, (default_value, true)),
(39, inbound_payments_claimed, option),

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assuming that write as required but read as option is intentional to be forwards compatible for old monitors?

});
// Note that `payment_preimages_with_info` was added (and is always written) in LDK 0.1, so
// we can use it to determine if this monitor was last written by LDK 0.1 or later.
Expand DownExpand Up@@ -6708,6 +6751,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
confirmed_commitment_tx_counterparty_output,
htlcs_resolved_on_chain: htlcs_resolved_on_chain.unwrap(),
htlcs_resolved_to_user: htlcs_resolved_to_user.unwrap(),
inbound_payments_claimed: inbound_payments_claimed.unwrap(),
spendable_txids_confirmed: spendable_txids_confirmed.unwrap(),

best_block,
Expand Down
1 change: 1 addition & 0 deletions lightning/src/ln/chanmon_update_fail_tests.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -4598,6 +4598,7 @@ fn test_claim_to_closed_channel_blocks_claimed_event() {
// available.
nodes[1].chain_monitor.complete_sole_pending_chan_update(&chan_a.2);
expect_payment_claimed!(nodes[1], payment_hash, 1_000_000);
check_added_monitors(&nodes[1], 1);
}

#[test]
Expand Down
176 changes: 125 additions & 51 deletions lightning/src/ln/channelmanager.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -1475,6 +1475,21 @@ impl_writeable_tlv_based!(PaymentCompleteUpdate, {
(7, htlc_id, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) struct InboundPaymentClaimedUpdate {
pub counterparty_node_id: PublicKey,
pub channel_funding_outpoint: OutPoint,
pub channel_id: ChannelId,
pub payment_hash: PaymentHash,
}

impl_writeable_tlv_based!(InboundPaymentClaimedUpdate, {
(1, counterparty_node_id, required),
(3, channel_funding_outpoint, required),
(5, channel_id, required),
(7, payment_hash, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) enum EventCompletionAction {
ReleaseRAAChannelMonitorUpdate {
Expand All@@ -1489,6 +1504,12 @@ pub(crate) enum EventCompletionAction {
/// fully-resolved in the [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.2!
ReleasePaymentCompleteChannelMonitorUpdate(PaymentCompleteUpdate),

/// When a payment's resolution is communicated to the downstream logic via
/// [`Event::PaymentClaimed`], we may want to mark the payment as fully-resolved in the
/// [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.3!
InboundPaymentClaimedChannelMonitorUpdate(InboundPaymentClaimedUpdate),
}
impl_writeable_tlv_based_enum!(EventCompletionAction,
(0, ReleaseRAAChannelMonitorUpdate) => {
Expand All@@ -1500,8 +1521,9 @@ impl_writeable_tlv_based_enum!(EventCompletionAction,
}
ChannelId::v1_from_funding_outpoint(channel_funding_outpoint.unwrap())
})),
}
},
{1, ReleasePaymentCompleteChannelMonitorUpdate} => (),
{3, InboundPaymentClaimedChannelMonitorUpdate} => (),
);

/// The source argument which is passed to [`ChannelManager::claim_mpp_part`].
Expand DownExpand Up@@ -9982,11 +10004,34 @@ This indicates a bug inside LDK. Please report this error at https://github.com/
let action = if let Some((outpoint, counterparty_node_id, channel_id)) =
durable_preimage_channel
{
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
let per_peer_state = self.per_peer_state.read().unwrap();
let is_channel_closed = per_peer_state
.get(&counterparty_node_id)
.map(|peer_state_mutex| {
let peer_state = peer_state_mutex.lock().unwrap();
!peer_state.channel_by_id.contains_key(&channel_id)
})
.unwrap_or(true);
// For open channels, we use ReleaseRAAChannelMonitorUpdate to maintain the blocking
// behavior (RAA updates are blocked until the PaymentClaimed event is handled).
// For closed channels, we use InboundPaymentClaimedChannelMonitorUpdate to persist
// that the PaymentClaimed event has been handled, preventing regeneration on restart.
Comment on lines +10017 to +10018

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

perhaps too edge-casey to worry about(?): durable_preimage_channel is picked as the last MPP channel, if this happens to be open and another one is closed do we still run into the duplicate events issue?

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a good point. It's tricky to fix, unfortunately, since we only have the OutPoint for the durable channel and we need that field to support downgrades to 0.1-. If we went for a more robust fix here and figured out backwards compat to persist outpoints for all channels, it seems like the simplest way would be to always issue this new monitor update for every MPP part when the event is processed, which is kind of annoying.

Since this fix is already not fully robust, only an improvement on the previous situation, my preference would be to just keep it as-is at least for now.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

and we need that field to support downgrades to 0.1

Was wondering if this is still supported, bc there's a comment about using htlcs instead once we don't. Happy to leave as-is 👌

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, yeah, I mean if people feel like this fix is too narrow and we should just accept redundant events until the channel is archived, I could honestly get behind that as well.

if is_channel_closed {

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I went with only generating these new monitor updates for claims on closed channels. So after #4462 we will still potentially have increased redundant PaymentClaimed events on restart for claims on open channels, until the claim is removed from all unrevoked commit txs. The approach is currently simple so I'm not sure it's worth fixing that, but open to thoughts.

Some(EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
channel_funding_outpoint: outpoint,
counterparty_node_id,
channel_id,
payment_hash,
},
))
} else {
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
}
} else {
None
};
Expand DownExpand Up@@ -14809,56 +14854,85 @@ impl<
htlc_id,
},
) => {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![ChannelMonitorUpdateStep::ReleasePaymentComplete {
htlc: htlc_id,
}],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: channel_funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
channel_funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
let update_step =
ChannelMonitorUpdateStep::ReleasePaymentComplete { htlc: htlc_id };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
counterparty_node_id,
channel_funding_outpoint,
channel_id,
payment_hash,
},
) => {
let update_step =
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
}
}
}

/// Helper for handling closed-channel monitor updates triggered by [`EventCompletionAction`]s.
fn handle_closed_channel_monitor_update_for_event(
&self, counterparty_node_id: PublicKey, funding_outpoint: OutPoint, channel_id: ChannelId,
update_step: ChannelMonitorUpdateStep,
) {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![update_step],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
}
/// Processes any events asynchronously in the order they were generated since the last call
/// using the given event handler.
///
Expand Down
Loading
Loading
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers"); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
44 changes: 44 additions & 0 deletions lightning/src/chain/channelmonitor.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -706,6 +706,17 @@ pub(crate) enum ChannelMonitorUpdateStep {
ReleasePaymentComplete {
htlc: SentHTLCId,
},
/// When an [`Event::PaymentClaimed`] is processed by the user, we need to track that so we don't
/// keep regenerating the event redundantly on startup.
///
/// This will remove the HTLC from [`ChannelMonitor::get_stored_preimages`].
///
/// Note that this is only generated for closed channels -- if the channel is open, the inbound
/// payment is pruned automatically when the HTLC is no longer present in any unrevoked
/// commitment transaction.
InboundPaymentClaimed {
payment_hash: PaymentHash,
},
}

impl ChannelMonitorUpdateStep {
Expand All@@ -723,6 +734,7 @@ impl ChannelMonitorUpdateStep {
ChannelMonitorUpdateStep::RenegotiatedFunding { .. } => "RenegotiatedFunding",
ChannelMonitorUpdateStep::RenegotiatedFundingLocked { .. } => "RenegotiatedFundingLocked",
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => "ReleasePaymentComplete",
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => "InboundPaymentClaimed",
}
}
}
Expand DownExpand Up@@ -769,6 +781,9 @@ impl_writeable_tlv_based_enum_upgradable!(ChannelMonitorUpdateStep,
(3, htlc_data, required),
(5, claimed_htlcs, required_vec),
},
(9, InboundPaymentClaimed) => {
(1, payment_hash, required),
},
(10, RenegotiatedFunding) => {
(1, channel_parameters, (required: ReadableArgs, None)),
(3, holder_commitment_tx, required),
Expand DownExpand Up@@ -1342,6 +1357,10 @@ pub(crate) struct ChannelMonitorImpl<Signer: EcdsaChannelSigner> {
/// this and we'll store the set of fully resolved payments here.
htlcs_resolved_to_user: HashSet<SentHTLCId>,

/// The set of inbound payments for which the user has processed an [`Event::PaymentClaimed`].
/// This is used to avoid regenerating the event redundantly on restart for closed channels.
inbound_payments_claimed: HashSet<PaymentHash>,

/// The set of `SpendableOutput` events which we have already passed upstream to be claimed.
/// These are tracked explicitly to ensure that we don't generate the same events redundantly
/// if users duplicatively confirm old transactions. Specifically for transactions claiming a
Expand DownExpand Up@@ -1755,6 +1774,7 @@ pub(crate) fn write_chanmon_internal<Signer: EcdsaChannelSigner, W: Writer>(
(34, channel_monitor.alternative_funding_confirmed, option),
(35, channel_monitor.is_manual_broadcast, required),
(37, channel_monitor.funding_seen_onchain, required),
(39, channel_monitor.inbound_payments_claimed, required),
});

Ok(())
Expand DownExpand Up@@ -1954,6 +1974,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {
confirmed_commitment_tx_counterparty_output: None,
htlcs_resolved_on_chain: Vec::new(),
htlcs_resolved_to_user: new_hash_set(),
inbound_payments_claimed: new_hash_set(),
spendable_txids_confirmed: Vec::new(),

best_block,
Expand DownExpand Up@@ -3249,6 +3270,20 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {

pub(crate) fn get_stored_preimages(

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure if we want to also rename this method

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yea, for sure.

&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
let inner = self.inner.lock().unwrap();

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, can we do this on a per-PaymentClaimDetails basis instead? In theory we can have two payments with the same hash/preimage.

inner
.payment_preimages
.iter()
.filter(|(hash, _)| !inner.inbound_payments_claimed.contains(*hash))
.map(|(hash, value)| (*hash, value.clone()))
.collect()
}

/// Used in tests to verify preimage propagation.
#[cfg(test)]
pub(crate) fn test_get_all_stored_preimages(
&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
self.inner.lock().unwrap().payment_preimages.clone()
}
Expand DownExpand Up@@ -4150,6 +4185,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
assert_eq!(updates.updates.len(), 1);
match updates.updates[0] {
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
// We should have already seen a `ChannelForceClosed` update if we're trying to
// provide a preimage at this point.
Expand DownExpand Up@@ -4281,6 +4317,10 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
log_trace!(logger, "HTLC {htlc:?} permanently and fully resolved");
self.htlcs_resolved_to_user.insert(*htlc);
},
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash } => {
log_trace!(logger, "Inbound payment {} claimed", payment_hash);
self.inbound_payments_claimed.insert(*payment_hash);
},
}
}

Expand DownExpand Up@@ -4313,6 +4353,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
ChannelMonitorUpdateStep::PaymentPreimage { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
}
}

Expand DownExpand Up@@ -6504,6 +6545,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
let mut funding_spend_confirmed = None;
let mut htlcs_resolved_on_chain = Some(Vec::new());
let mut htlcs_resolved_to_user = Some(new_hash_set());
let mut inbound_payments_claimed = Some(new_hash_set());
let mut funding_spend_seen = Some(false);
let mut counterparty_node_id = None;
let mut confirmed_commitment_tx_counterparty_output = None;
Expand DownExpand Up@@ -6543,6 +6585,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
(34, alternative_funding_confirmed, option),
(35, is_manual_broadcast, (default_value, false)),
(37, funding_seen_onchain, (default_value, true)),
(39, inbound_payments_claimed, option),

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assuming that write as required but read as option is intentional to be forwards compatible for old monitors?

});
// Note that `payment_preimages_with_info` was added (and is always written) in LDK 0.1, so
// we can use it to determine if this monitor was last written by LDK 0.1 or later.
Expand DownExpand Up@@ -6708,6 +6751,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
confirmed_commitment_tx_counterparty_output,
htlcs_resolved_on_chain: htlcs_resolved_on_chain.unwrap(),
htlcs_resolved_to_user: htlcs_resolved_to_user.unwrap(),
inbound_payments_claimed: inbound_payments_claimed.unwrap(),
spendable_txids_confirmed: spendable_txids_confirmed.unwrap(),

best_block,
Expand Down
1 change: 1 addition & 0 deletions lightning/src/ln/chanmon_update_fail_tests.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -4598,6 +4598,7 @@ fn test_claim_to_closed_channel_blocks_claimed_event() {
// available.
nodes[1].chain_monitor.complete_sole_pending_chan_update(&chan_a.2);
expect_payment_claimed!(nodes[1], payment_hash, 1_000_000);
check_added_monitors(&nodes[1], 1);
}

#[test]
Expand Down
176 changes: 125 additions & 51 deletions lightning/src/ln/channelmanager.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -1475,6 +1475,21 @@ impl_writeable_tlv_based!(PaymentCompleteUpdate, {
(7, htlc_id, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) struct InboundPaymentClaimedUpdate {
pub counterparty_node_id: PublicKey,
pub channel_funding_outpoint: OutPoint,
pub channel_id: ChannelId,
pub payment_hash: PaymentHash,
}

impl_writeable_tlv_based!(InboundPaymentClaimedUpdate, {
(1, counterparty_node_id, required),
(3, channel_funding_outpoint, required),
(5, channel_id, required),
(7, payment_hash, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) enum EventCompletionAction {
ReleaseRAAChannelMonitorUpdate {
Expand All@@ -1489,6 +1504,12 @@ pub(crate) enum EventCompletionAction {
/// fully-resolved in the [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.2!
ReleasePaymentCompleteChannelMonitorUpdate(PaymentCompleteUpdate),

/// When a payment's resolution is communicated to the downstream logic via
/// [`Event::PaymentClaimed`], we may want to mark the payment as fully-resolved in the
/// [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.3!
InboundPaymentClaimedChannelMonitorUpdate(InboundPaymentClaimedUpdate),
}
impl_writeable_tlv_based_enum!(EventCompletionAction,
(0, ReleaseRAAChannelMonitorUpdate) => {
Expand All@@ -1500,8 +1521,9 @@ impl_writeable_tlv_based_enum!(EventCompletionAction,
}
ChannelId::v1_from_funding_outpoint(channel_funding_outpoint.unwrap())
})),
}
},
{1, ReleasePaymentCompleteChannelMonitorUpdate} => (),
{3, InboundPaymentClaimedChannelMonitorUpdate} => (),
);

/// The source argument which is passed to [`ChannelManager::claim_mpp_part`].
Expand DownExpand Up@@ -9982,11 +10004,34 @@ This indicates a bug inside LDK. Please report this error at https://github.com/
let action = if let Some((outpoint, counterparty_node_id, channel_id)) =
durable_preimage_channel
{
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
let per_peer_state = self.per_peer_state.read().unwrap();
let is_channel_closed = per_peer_state
.get(&counterparty_node_id)
.map(|peer_state_mutex| {
let peer_state = peer_state_mutex.lock().unwrap();
!peer_state.channel_by_id.contains_key(&channel_id)
})
.unwrap_or(true);
// For open channels, we use ReleaseRAAChannelMonitorUpdate to maintain the blocking
// behavior (RAA updates are blocked until the PaymentClaimed event is handled).
// For closed channels, we use InboundPaymentClaimedChannelMonitorUpdate to persist
// that the PaymentClaimed event has been handled, preventing regeneration on restart.
Comment on lines +10017 to +10018

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

perhaps too edge-casey to worry about(?): durable_preimage_channel is picked as the last MPP channel, if this happens to be open and another one is closed do we still run into the duplicate events issue?

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a good point. It's tricky to fix, unfortunately, since we only have the OutPoint for the durable channel and we need that field to support downgrades to 0.1-. If we went for a more robust fix here and figured out backwards compat to persist outpoints for all channels, it seems like the simplest way would be to always issue this new monitor update for every MPP part when the event is processed, which is kind of annoying.

Since this fix is already not fully robust, only an improvement on the previous situation, my preference would be to just keep it as-is at least for now.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

and we need that field to support downgrades to 0.1

Was wondering if this is still supported, bc there's a comment about using htlcs instead once we don't. Happy to leave as-is 👌

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, yeah, I mean if people feel like this fix is too narrow and we should just accept redundant events until the channel is archived, I could honestly get behind that as well.

if is_channel_closed {

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I went with only generating these new monitor updates for claims on closed channels. So after #4462 we will still potentially have increased redundant PaymentClaimed events on restart for claims on open channels, until the claim is removed from all unrevoked commit txs. The approach is currently simple so I'm not sure it's worth fixing that, but open to thoughts.

Some(EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
channel_funding_outpoint: outpoint,
counterparty_node_id,
channel_id,
payment_hash,
},
))
} else {
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
}
} else {
None
};
Expand DownExpand Up@@ -14809,56 +14854,85 @@ impl<
htlc_id,
},
) => {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![ChannelMonitorUpdateStep::ReleasePaymentComplete {
htlc: htlc_id,
}],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: channel_funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
channel_funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
let update_step =
ChannelMonitorUpdateStep::ReleasePaymentComplete { htlc: htlc_id };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
counterparty_node_id,
channel_funding_outpoint,
channel_id,
payment_hash,
},
) => {
let update_step =
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
}
}
}

/// Helper for handling closed-channel monitor updates triggered by [`EventCompletionAction`]s.
fn handle_closed_channel_monitor_update_for_event(
&self, counterparty_node_id: PublicKey, funding_outpoint: OutPoint, channel_id: ChannelId,
update_step: ChannelMonitorUpdateStep,
) {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![update_step],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
}
/// Processes any events asynchronously in the order they were generated since the last call
/// using the given event handler.
///
Expand Down
Loading
Loading
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode"); } } catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); } })(); })();
Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
44 changes: 44 additions & 0 deletions lightning/src/chain/channelmonitor.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -706,6 +706,17 @@ pub(crate) enum ChannelMonitorUpdateStep {
ReleasePaymentComplete {
htlc: SentHTLCId,
},
/// When an [`Event::PaymentClaimed`] is processed by the user, we need to track that so we don't
/// keep regenerating the event redundantly on startup.
///
/// This will remove the HTLC from [`ChannelMonitor::get_stored_preimages`].
///
/// Note that this is only generated for closed channels -- if the channel is open, the inbound
/// payment is pruned automatically when the HTLC is no longer present in any unrevoked
/// commitment transaction.
InboundPaymentClaimed {
payment_hash: PaymentHash,
},
}

impl ChannelMonitorUpdateStep {
Expand All@@ -723,6 +734,7 @@ impl ChannelMonitorUpdateStep {
ChannelMonitorUpdateStep::RenegotiatedFunding { .. } => "RenegotiatedFunding",
ChannelMonitorUpdateStep::RenegotiatedFundingLocked { .. } => "RenegotiatedFundingLocked",
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => "ReleasePaymentComplete",
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => "InboundPaymentClaimed",
}
}
}
Expand DownExpand Up@@ -769,6 +781,9 @@ impl_writeable_tlv_based_enum_upgradable!(ChannelMonitorUpdateStep,
(3, htlc_data, required),
(5, claimed_htlcs, required_vec),
},
(9, InboundPaymentClaimed) => {
(1, payment_hash, required),
},
(10, RenegotiatedFunding) => {
(1, channel_parameters, (required: ReadableArgs, None)),
(3, holder_commitment_tx, required),
Expand DownExpand Up@@ -1342,6 +1357,10 @@ pub(crate) struct ChannelMonitorImpl<Signer: EcdsaChannelSigner> {
/// this and we'll store the set of fully resolved payments here.
htlcs_resolved_to_user: HashSet<SentHTLCId>,

/// The set of inbound payments for which the user has processed an [`Event::PaymentClaimed`].
/// This is used to avoid regenerating the event redundantly on restart for closed channels.
inbound_payments_claimed: HashSet<PaymentHash>,

/// The set of `SpendableOutput` events which we have already passed upstream to be claimed.
/// These are tracked explicitly to ensure that we don't generate the same events redundantly
/// if users duplicatively confirm old transactions. Specifically for transactions claiming a
Expand DownExpand Up@@ -1755,6 +1774,7 @@ pub(crate) fn write_chanmon_internal<Signer: EcdsaChannelSigner, W: Writer>(
(34, channel_monitor.alternative_funding_confirmed, option),
(35, channel_monitor.is_manual_broadcast, required),
(37, channel_monitor.funding_seen_onchain, required),
(39, channel_monitor.inbound_payments_claimed, required),
});

Ok(())
Expand DownExpand Up@@ -1954,6 +1974,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {
confirmed_commitment_tx_counterparty_output: None,
htlcs_resolved_on_chain: Vec::new(),
htlcs_resolved_to_user: new_hash_set(),
inbound_payments_claimed: new_hash_set(),
spendable_txids_confirmed: Vec::new(),

best_block,
Expand DownExpand Up@@ -3249,6 +3270,20 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitor<Signer> {

pub(crate) fn get_stored_preimages(

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure if we want to also rename this method

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yea, for sure.

&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
let inner = self.inner.lock().unwrap();

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, can we do this on a per-PaymentClaimDetails basis instead? In theory we can have two payments with the same hash/preimage.

inner
.payment_preimages
.iter()
.filter(|(hash, _)| !inner.inbound_payments_claimed.contains(*hash))
.map(|(hash, value)| (*hash, value.clone()))
.collect()
}

/// Used in tests to verify preimage propagation.
#[cfg(test)]
pub(crate) fn test_get_all_stored_preimages(
&self,
) -> HashMap<PaymentHash, (PaymentPreimage, Vec<PaymentClaimDetails>)> {
self.inner.lock().unwrap().payment_preimages.clone()
}
Expand DownExpand Up@@ -4150,6 +4185,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
assert_eq!(updates.updates.len(), 1);
match updates.updates[0] {
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
// We should have already seen a `ChannelForceClosed` update if we're trying to
// provide a preimage at this point.
Expand DownExpand Up@@ -4281,6 +4317,10 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
log_trace!(logger, "HTLC {htlc:?} permanently and fully resolved");
self.htlcs_resolved_to_user.insert(*htlc);
},
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash } => {
log_trace!(logger, "Inbound payment {} claimed", payment_hash);
self.inbound_payments_claimed.insert(*payment_hash);
},
}
}

Expand DownExpand Up@@ -4313,6 +4353,7 @@ impl<Signer: EcdsaChannelSigner> ChannelMonitorImpl<Signer> {
ChannelMonitorUpdateStep::PaymentPreimage { .. } => {},
ChannelMonitorUpdateStep::ChannelForceClosed { .. } => {},
ChannelMonitorUpdateStep::ReleasePaymentComplete { .. } => {},
ChannelMonitorUpdateStep::InboundPaymentClaimed { .. } => {},
}
}

Expand DownExpand Up@@ -6504,6 +6545,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
let mut funding_spend_confirmed = None;
let mut htlcs_resolved_on_chain = Some(Vec::new());
let mut htlcs_resolved_to_user = Some(new_hash_set());
let mut inbound_payments_claimed = Some(new_hash_set());
let mut funding_spend_seen = Some(false);
let mut counterparty_node_id = None;
let mut confirmed_commitment_tx_counterparty_output = None;
Expand DownExpand Up@@ -6543,6 +6585,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
(34, alternative_funding_confirmed, option),
(35, is_manual_broadcast, (default_value, false)),
(37, funding_seen_onchain, (default_value, true)),
(39, inbound_payments_claimed, option),

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assuming that write as required but read as option is intentional to be forwards compatible for old monitors?

});
// Note that `payment_preimages_with_info` was added (and is always written) in LDK 0.1, so
// we can use it to determine if this monitor was last written by LDK 0.1 or later.
Expand DownExpand Up@@ -6708,6 +6751,7 @@ impl<'a, 'b, ES: EntropySource, SP: SignerProvider> ReadableArgs<(&'a ES, &'b SP
confirmed_commitment_tx_counterparty_output,
htlcs_resolved_on_chain: htlcs_resolved_on_chain.unwrap(),
htlcs_resolved_to_user: htlcs_resolved_to_user.unwrap(),
inbound_payments_claimed: inbound_payments_claimed.unwrap(),
spendable_txids_confirmed: spendable_txids_confirmed.unwrap(),

best_block,
Expand Down
1 change: 1 addition & 0 deletions lightning/src/ln/chanmon_update_fail_tests.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -4598,6 +4598,7 @@ fn test_claim_to_closed_channel_blocks_claimed_event() {
// available.
nodes[1].chain_monitor.complete_sole_pending_chan_update(&chan_a.2);
expect_payment_claimed!(nodes[1], payment_hash, 1_000_000);
check_added_monitors(&nodes[1], 1);
}

#[test]
Expand Down
176 changes: 125 additions & 51 deletions lightning/src/ln/channelmanager.rs
Original file line numberDiff line numberDiff line change
Expand Up@@ -1475,6 +1475,21 @@ impl_writeable_tlv_based!(PaymentCompleteUpdate, {
(7, htlc_id, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) struct InboundPaymentClaimedUpdate {
pub counterparty_node_id: PublicKey,
pub channel_funding_outpoint: OutPoint,
pub channel_id: ChannelId,
pub payment_hash: PaymentHash,
}

impl_writeable_tlv_based!(InboundPaymentClaimedUpdate, {
(1, counterparty_node_id, required),
(3, channel_funding_outpoint, required),
(5, channel_id, required),
(7, payment_hash, required),
});

#[derive(Clone, Debug, PartialEq, Eq)]
pub(crate) enum EventCompletionAction {
ReleaseRAAChannelMonitorUpdate {
Expand All@@ -1489,6 +1504,12 @@ pub(crate) enum EventCompletionAction {
/// fully-resolved in the [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.2!
ReleasePaymentCompleteChannelMonitorUpdate(PaymentCompleteUpdate),

/// When a payment's resolution is communicated to the downstream logic via
/// [`Event::PaymentClaimed`], we may want to mark the payment as fully-resolved in the
/// [`ChannelMonitor`], which we do via this action.
/// Note that this action will be dropped on downgrade to LDK prior to 0.3!
InboundPaymentClaimedChannelMonitorUpdate(InboundPaymentClaimedUpdate),
}
impl_writeable_tlv_based_enum!(EventCompletionAction,
(0, ReleaseRAAChannelMonitorUpdate) => {
Expand All@@ -1500,8 +1521,9 @@ impl_writeable_tlv_based_enum!(EventCompletionAction,
}
ChannelId::v1_from_funding_outpoint(channel_funding_outpoint.unwrap())
})),
}
},
{1, ReleasePaymentCompleteChannelMonitorUpdate} => (),
{3, InboundPaymentClaimedChannelMonitorUpdate} => (),
);

/// The source argument which is passed to [`ChannelManager::claim_mpp_part`].
Expand DownExpand Up@@ -9982,11 +10004,34 @@ This indicates a bug inside LDK. Please report this error at https://github.com/
let action = if let Some((outpoint, counterparty_node_id, channel_id)) =
durable_preimage_channel
{
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
let per_peer_state = self.per_peer_state.read().unwrap();
let is_channel_closed = per_peer_state
.get(&counterparty_node_id)
.map(|peer_state_mutex| {
let peer_state = peer_state_mutex.lock().unwrap();
!peer_state.channel_by_id.contains_key(&channel_id)
})
.unwrap_or(true);
// For open channels, we use ReleaseRAAChannelMonitorUpdate to maintain the blocking
// behavior (RAA updates are blocked until the PaymentClaimed event is handled).
// For closed channels, we use InboundPaymentClaimedChannelMonitorUpdate to persist
// that the PaymentClaimed event has been handled, preventing regeneration on restart.
Comment on lines +10017 to +10018

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

perhaps too edge-casey to worry about(?): durable_preimage_channel is picked as the last MPP channel, if this happens to be open and another one is closed do we still run into the duplicate events issue?

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a good point. It's tricky to fix, unfortunately, since we only have the OutPoint for the durable channel and we need that field to support downgrades to 0.1-. If we went for a more robust fix here and figured out backwards compat to persist outpoints for all channels, it seems like the simplest way would be to always issue this new monitor update for every MPP part when the event is processed, which is kind of annoying.

Since this fix is already not fully robust, only an improvement on the previous situation, my preference would be to just keep it as-is at least for now.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

and we need that field to support downgrades to 0.1

Was wondering if this is still supported, bc there's a comment about using htlcs instead once we don't. Happy to leave as-is 👌

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, yeah, I mean if people feel like this fix is too narrow and we should just accept redundant events until the channel is archived, I could honestly get behind that as well.

if is_channel_closed {

Copy link
Copy Markdown
ContributorAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I went with only generating these new monitor updates for claims on closed channels. So after #4462 we will still potentially have increased redundant PaymentClaimed events on restart for claims on open channels, until the claim is removed from all unrevoked commit txs. The approach is currently simple so I'm not sure it's worth fixing that, but open to thoughts.

Some(EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
channel_funding_outpoint: outpoint,
counterparty_node_id,
channel_id,
payment_hash,
},
))
} else {
Some(EventCompletionAction::ReleaseRAAChannelMonitorUpdate {
channel_funding_outpoint: Some(outpoint),
counterparty_node_id,
channel_id,
})
}
} else {
None
};
Expand DownExpand Up@@ -14809,56 +14854,85 @@ impl<
htlc_id,
},
) => {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![ChannelMonitorUpdateStep::ReleasePaymentComplete {
htlc: htlc_id,
}],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: channel_funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
channel_funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
let update_step =
ChannelMonitorUpdateStep::ReleasePaymentComplete { htlc: htlc_id };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
EventCompletionAction::InboundPaymentClaimedChannelMonitorUpdate(
InboundPaymentClaimedUpdate {
counterparty_node_id,
channel_funding_outpoint,
channel_id,
payment_hash,
},
) => {
let update_step =
ChannelMonitorUpdateStep::InboundPaymentClaimed { payment_hash };
self.handle_closed_channel_monitor_update_for_event(
counterparty_node_id,
channel_funding_outpoint,
channel_id,
update_step,
);
},
}
}
}

/// Helper for handling closed-channel monitor updates triggered by [`EventCompletionAction`]s.
fn handle_closed_channel_monitor_update_for_event(
&self, counterparty_node_id: PublicKey, funding_outpoint: OutPoint, channel_id: ChannelId,
update_step: ChannelMonitorUpdateStep,
) {
let per_peer_state = self.per_peer_state.read().unwrap();
let mut peer_state_lock = per_peer_state
.get(&counterparty_node_id)
.map(|state| state.lock().unwrap())
.expect("Channels originating a payment resolution must have peer state");
let peer_state = &mut *peer_state_lock;
let update_id = peer_state
.closed_channel_monitor_update_ids
.get_mut(&channel_id)
.expect("Channels originating a payment resolution must have a monitor");
// Note that for channels closed pre-0.1, the latest update_id is `u64::MAX`.
*update_id = update_id.saturating_add(1);

let update = ChannelMonitorUpdate {
update_id: *update_id,
channel_id: Some(channel_id),
updates: vec![update_step],
};

let during_startup =
!self.background_events_processed_since_startup.load(Ordering::Acquire);
if during_startup {
let event = BackgroundEvent::MonitorUpdateRegeneratedOnStartup {
counterparty_node_id,
funding_txo: funding_outpoint,
channel_id,
update,
};
self.pending_background_events.lock().unwrap().push(event);
} else {
if let Some(actions) = self.handle_post_close_monitor_update(
&mut peer_state.in_flight_monitor_updates,
&mut peer_state.monitor_update_blocked_actions,
funding_outpoint,
update,
counterparty_node_id,
channel_id,
) {
mem::drop(peer_state_lock);
mem::drop(per_peer_state);
self.handle_monitor_update_completion_actions(actions);
}
}
}
/// Processes any events asynchronously in the order they were generated since the last call
/// using the given event handler.
///
Expand Down
Loading
Loading