Skip to content

refactor(mem): use memf-core's RangedPhysMem instead of a local copy - #17

Merged
h4x0r merged 1 commit into
mainfrom
refactor/use-ranged-phys-mem
Aug 4, 2026
Merged

refactor(mem): use memf-core's RangedPhysMem instead of a local copy#17
h4x0r merged 1 commit into
mainfrom
refactor/use-ranged-phys-mem

Conversation

@h4x0r

@h4x0r h4x0r commented Aug 4, 2026

Copy link
Copy Markdown
Collaborator

memf-core 0.2.4 exports RangedPhysMem, so the wrapper this crate grew for the netstat seam tests is redundant — 23 lines, identical in shape to the one memf-windows carried privately until the same release deleted it. Both copies are now gone.

The wrapper existed because SyntheticPhysMem advertises no ranges and PhysicalMemoryProvider::total_size sums them — so it is zero, and any physical scan traverses (0, 0) and sees nothing. Both netstat tests still pass against the exported type, including the one that needs a scan to actually run and find nothing.

cargo vet --locked needed the publisher cache refreshed: the [[trusted.memf-core]] record was already present and correct, but imports.lock had no publisher entry for 0.2.4 and --locked forbids fetching one. Publishing a new version of one of our own crates reddens vet in every consumer until that cache is refreshed alongside the bump.

Verificationcargo fmt --all -- --check clean · cargo clippy --workspace --lib --bins -- -D warnings clean · cargo test --workspace 212 suites, 0 failures · cargo vet --locked succeeds

memf-core 0.2.4 exports `RangedPhysMem`, so the wrapper this crate grew for the
netstat seam tests is redundant -- 23 lines, identical in shape to the one
memf-windows carried privately until the same release deleted it.

The wrapper exists because `SyntheticPhysMem` advertises no ranges and
`PhysicalMemoryProvider::total_size` sums them, so it is zero and any physical
scan traverses `(0, 0)`. Both netstat tests still pass against the exported
type, including the one that needs a scan to actually run and find nothing.

`cargo vet --locked` needed the publisher cache refreshed: the
`[[trusted.memf-core]]` record was already present and correct, but
imports.lock had no publisher entry for 0.2.4, and `--locked` forbids fetching
one. Publishing a new version of one of our own crates reddens vet in every
consumer until that cache is refreshed in the same commit as the bump.

Full workspace: 212 suites, 0 failures; fmt, clippy and vet clean.
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedmemf-core@​0.2.3 ⏵ 0.2.410010093100100

View full report

@h4x0r
h4x0r merged commit acf22a5 into main Aug 4, 2026
15 of 17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant