Re: [RFC PATCH 01/20] ceph: add comments to metadata structures in auth.h

[Max Kellermann <max@blarg.de>]

On 2025/09/05 22:00, Viacheslav Dubeyko <slava@dubeyko.com> wrote:
> +	/* Sign outgoing messages using session keys */
>  	int (*sign_message)(struct ceph_auth_handshake *auth,
>  			    struct ceph_msg *msg);
> +	/* Verify signatures on incoming messages */
>  	int (*check_message_signature)(struct ceph_auth_handshake *auth,
>  				       struct ceph_msg *msg);

No, this function does not verify the signatureS of incoming messageS
(two plurals).
It verifies one signature of one message.

Same mistake on sign_message.

Apart from these plurals, the text barely adds any value because this
is obvious enough from the names.  What would really have been helpful
would be an explanation of parameters and return values.  But I guess
Claude didn't know...  and fortunately didn't hallucinate anything.

> +	/* Preferred connection security mode */
> +	int preferred_mode;
> +	/* Fallback connection security mode */
> +	int fallback_mode;

You have removed important information from the old comment about what
kinds of values are expected here.

> +	/* Protects concurrent access to auth state */
>  	struct mutex mutex;

What is "auth state"?  What exactly is being protected?  Does "auth
state" mean all fields of this struct are being protected?  I guess
Claude didn't know so it just wrote some generic text devoid of
information.