id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc
2	failure in gift establishment is not handled correctly	Brian Warner	Brian Warner	"Alice has a connection to Bob and Carol. Alice sends a message to Bob containing a reference to Carol. Bob's tub initiates a connection to Carol and waits for it to complete before the message can be delivered to Bob. If this Bob-to-Carol connection fails, or times out, Alice's message is supposed to fail with an error.

robk discovered that there is at least one of the following two problems in 0.1.4:

 1. establishing a connection to a new Tub, when the network is silently dropping all packets
    to that Tub, does not cause a connection establishment timeout. getReference() never returns.
 1. or, if the getReference() performed inside the introduction handler signals an errback, that
    error is not reported back to the original sender

He had a FURL pointing at a host+port target which was supposed to be port-forwarded to a Tub, but it turns out that the firewall was not configured as expected and the packets were instead being silently discarded. The Alice-to-Bob message never finished (neither with success nor failure), even after about 10 minutes of waiting.

The intention is that there should be a timer that starts the moment getReference() is called, and if the reference has not been established or abandoned by the time it expires, the getReference should errback.

Another intention is that any errors during the gift-acquisition phase should be reported in the same way as errors during deserialization and during delivery of the message: all should get reported as an errback back to the original caller.

As a side note, the sort of logging that would have helped track this down faster would be to make it easy to see messages being sent, received, acknowledged, and retired. Bonus points for being able to see the set of messages that are currently outstanding, since application programmers have a good idea about how long messages should take to be processed, and seeing a 'introduce' message sit in the pending list for more than a moment is grounds for suspicion.
"	defect	closed	major	0.1.5	introduction	0.1.4	fixed