passt

mirrors/passt

Fork 0

mirror of https://passt.top/passt synced 2025-05-03 08:28:51 +02:00

Commit graph

93394f4ef0 selinux: Add getattr to class udp_socket master Janne Grunau 2025-05-01 11:54:07 +02:00
11be695f5c flow: fix podman issue #25959 Laurent Vivier 2025-04-30 18:05:25 +02:00
6a96cd97a5 util: Fix typo, ASSSERTION -> ASSERTION Stefano Brivio 2025-04-30 16:59:13 +02:00
ea0a1240df passt-repair: Hide bogus gcc warning from -Og Stefano Brivio 2025-04-30 16:48:34 +02:00
9c23934536 Debugging changes for Podman issue #25959 podman_25959 Stefano Brivio 2025-04-29 17:47:15 +02:00
aa1cc89228 conf: allow --fd 0 Alyssa Ross 2025-04-26 10:44:25 +02:00
436afc3044 udp: Translate offender addresses for ICMP messages David Gibson 2025-04-17 11:55:43 +10:00
08e617ec2b udp: Rework offender address handling in udp_sock_recverr() David Gibson 2025-04-17 11:55:42 +10:00
4668e91378 treewide: Improve robustness against sockaddrs of unexpected family David Gibson 2025-04-17 11:55:41 +10:00
9128f6e8f4 fwd: Split out helpers for port-independent NAT David Gibson 2025-04-17 11:55:40 +10:00
2340bbf867 udp: Propagate errors on listening and brand new sockets 2025_04_15.2340bbf David Gibson 2025-04-15 17:16:24 +10:00
cfc0ee145a udp: Minor re-organisation of udp_sock_recverr() David Gibson 2025-04-15 17:16:23 +10:00
f107a86cc0 udp: Add udp_pktinfo() helper David Gibson 2025-04-15 17:16:22 +10:00
04984578b0 udp: Deal with errors as we go in udp_sock_fwd() David Gibson 2025-04-15 17:16:21 +10:00
3f995586b3 udp: Pass socket & flow information direction to error handling functions David Gibson 2025-04-15 17:16:20 +10:00
1bb8145c22 udp: Be quieter about errors on UDP receive David Gibson 2025-04-15 17:16:19 +10:00
baf049f8e0 udp: Fix breakage of UDP error handling by PKTINFO support David Gibson 2025-04-15 17:16:18 +10:00
50249086a9 conf: Honour --dns-forward for local resolver even with --no-map-gw Stefano Brivio 2025-04-11 10:50:00 +02:00
bbff3653d6 conf: Split add_dns_resolv() into separate IPv4 and IPv6 versions Stefano Brivio 2025-04-11 09:58:31 +02:00
59cc89f4cc udp, udp_flow: Track our specific address on socket interfaces David Gibson 2025-04-10 17:16:40 +10:00
695c62396e inany: Improve ASSERT message for bad socket family David Gibson 2025-04-10 17:16:39 +10:00
f4b0dd8b06 udp: Use PKTINFO cmsgs to get destination address for received datagrams David Gibson 2025-04-10 17:16:38 +10:00
6693fa1158 tcp_splice: Don't clobber errno before checking for EAGAIN David Gibson 2025-04-09 16:35:41 +10:00
d3f33f3b8e tcp_splice: Don't double count bytes read on EINTR David Gibson 2025-04-09 16:35:40 +10:00
ffbef85e97 conf: Add missing return in conf_nat(), fix --map-guest-addr none Stefano Brivio 2025-04-08 07:57:51 +02:00
06ef64cdb7 udp_flow: Save 8 bytes in struct udp_flow on 64-bit architectures Stefano Brivio 2025-04-08 07:49:55 +02:00
9725e79888 udp_flow: Don't discard packets that arrive between bind() and connect() David Gibson 2025-04-04 21:15:42 +11:00
9eb5406260 udp: Fold udp_splice_prepare and udp_splice_send into udp_sock_to_sock David Gibson 2025-04-04 21:15:41 +11:00
bd6a41ee76 udp: Rework udp_listen_sock_data() into udp_sock_fwd() David Gibson 2025-04-04 21:15:40 +11:00
159beefa36 udp_flow: Take pif and port as explicit parameters to udp_flow_from_sock() David Gibson 2025-04-04 21:15:39 +11:00
fd844a90bc udp: Move UDP_MAX_FRAMES to udp.c David Gibson 2025-04-04 21:15:38 +11:00
fc6ee68ad3 udp: Merge vhost-user and "buf" listening socket paths David Gibson 2025-04-04 21:15:37 +11:00
0304dd9c34 udp: Split spliced forwarding path from udp_buf_reply_sock_data() David Gibson 2025-04-04 21:15:36 +11:00
5221e177e1 udp: Parameterize number of datagrams handled by udp_*_reply_sock_data() David Gibson 2025-04-04 21:15:35 +11:00
3a0881dfd0 udp: Don't bother to batch datagrams from "listening" socket David Gibson 2025-04-04 21:15:34 +11:00
84ab1305fa udp: Polish udp_vu_sock_info() and remove from vu specific code David Gibson 2025-04-04 21:15:33 +11:00
1d7bbb101a udp: Make udp_sock_recv() take max number of frames as a parameter David Gibson 2025-04-04 21:15:32 +11:00
d74b5a7c10 udp: Use connect()ed sockets for initiating side David Gibson 2025-04-04 21:15:31 +11:00
a7775e9550 udp: support traceroute in direction tap-socket Jon Maloy 2025-04-05 15:21:26 -04:00
06784d7fc6 passt-repair: Ensure that read buffer is NULL-terminated Stefano Brivio 2025-04-03 19:01:02 +02:00
684870a766 udp: Correct some seccomp filter annotations David Gibson 2025-04-01 19:57:10 +11:00
76e554d9ec udp: Simplify updates to UDP flow timestamp David Gibson 2025-04-01 19:57:09 +11:00
8aa2d90c8d udp: Remove redundant udp_at_sidx() call in udp_tap_handler() David Gibson 2025-04-01 19:57:08 +11:00
3d41e4d838 passt-repair: Correct off-by-one error verifying name David Gibson 2025-04-02 15:43:40 +11:00
dec3d73e1e migrate, tcp: bind() migrated sockets in repair mode David Gibson 2025-04-02 14:13:19 +11:00
6bfc60b095 platform requirements: Add test for address conflicts with TCP_REPAIR David Gibson 2025-04-02 14:13:18 +11:00
8e32881ef1 platform requirements: Add attributes to die() function David Gibson 2025-04-02 14:13:17 +11:00
2ed2d59def platform requirements: Fix clang-tidy warning David Gibson 2025-04-02 14:13:16 +11:00
8fed562e63 passt-repair: Correct off-by-one error verifying name c9s David Gibson 2025-04-02 15:28:04 +11:00
dadf2aa269 migrate, tcp: bind() migrated sockets in repair mode David Gibson 2025-04-02 13:51:22 +11:00
d9a7f1b008 pasta, passt-repair: Support multiple events per read() in inotify handlers Stefano Brivio 2025-03-28 11:39:58 +11:00
37550961ea tcp: Flush socket before checking for more data in active close state Stefano Brivio 2025-03-19 17:57:45 +01:00
53f2ed715e migrate: Bump migration version number David Gibson 2025-03-19 16:14:23 +11:00
8c5727bd9b migrate, tcp: Migrate RFC 7323 timestamp David Gibson 2025-03-19 16:14:22 +11:00
4c6b69f359 flow: Add flow_perror() helper David Gibson 2025-02-18 19:59:24 +11:00
8a938c5a2c migrate, tcp: More careful marshalling of mss parameter during migration David Gibson 2025-03-19 16:14:21 +11:00
f45aac7aed passt-repair: Fix build with -Werror=format-security Stefano Brivio 2025-03-18 17:18:47 +01:00
283b18f6b1 flow, repair: Wait for a short while for passt-repair to connect Stefano Brivio 2025-03-06 20:00:51 +01:00
24117b65dc passt-repair: Add directory watch Stefano Brivio 2025-03-07 23:27:03 +01:00
b6eb6708cd selinux: Fixes/workarounds for passt and passt-repair, mostly for libvirt usage Stefano Brivio 2025-02-28 01:14:01 +01:00
228542ddc6 tcp: Send RST in response to guest packets that match no connection David Gibson 2025-03-05 15:32:30 +11:00
9d47c2ff3a tap: Consider IPv6 flow label when building packet sequences David Gibson 2025-03-05 15:32:29 +11:00
d4f8eb722f ip: Helpers to access IPv6 flow label David Gibson 2025-03-05 15:32:28 +11:00
154880ef09 migrate, tcp: Don't flow_alloc_cancel() during incoming migration David Gibson 2025-02-27 16:55:17 +11:00
44eed5c950 tcp: Unconditionally move to CLOSED state on tcp_rst() David Gibson 2025-02-27 16:55:16 +11:00
4b8660b3d5 tcp: Correct error code handling from tcp_flow_repair_socket() David Gibson 2025-02-27 16:55:15 +11:00
83f95ade5b migrate, flow: Don't attempt to migrate TCP flows without passt-repair David Gibson 2025-02-27 16:55:14 +11:00
2aa1b789b4 migrate, flow: Trivially succeed if migrating with no flows David Gibson 2025-02-27 16:55:13 +11:00
e5575743d9 selinux: Drop user_namespace create allow rules Stefano Brivio 2023-08-21 17:52:28 +02:00
3de5af6e41 udp: Improve name of UDP related ICMP sending functions David Gibson 2025-03-28 14:34:15 +11:00
025a3c2686 udp: Don't attempt to forward ICMP socket errors to other sockets David Gibson 2025-03-28 14:34:14 +11:00
42a854a52b pasta, passt-repair: Support multiple events per read() in inotify handlers Stefano Brivio 2025-03-28 11:39:58 +11:00
13e7805170 log tcp socket error tcpsoerror David Gibson 2025-03-28 16:41:42 +11:00
65cca54be8 udp: correct source address for ICMP messages Jon Maloy 2025-03-26 11:59:02 -04:00
664c588be7 build: normalize arm targets Julian Wundrak 2025-03-26 20:14:31 +00:00
77883fbdd1 udp: Add helper function for creating connected UDP socket David Gibson 2025-03-26 14:44:07 +11:00
37d78c9ef3 udp: Always hash socket facing flowsides David Gibson 2025-03-26 14:44:06 +11:00
f67c488b81 udp: Better handling of failure to forward from reply socket David Gibson 2025-03-26 14:44:05 +11:00
269cf6a12a udp: Share more logic between vu and non-vu reply socket paths David Gibson 2025-03-26 14:44:04 +11:00
d924b7dfc4 udp_vu: Factor things out of udp_vu_reply_sock_data() loop David Gibson 2025-03-26 14:44:03 +11:00
5a977c2f4e udp: Simplify checking of epoll event bits David Gibson 2025-03-26 14:44:02 +11:00
89b203b851 udp: Common invocation of udp_sock_errs() for vhost-user and "buf" paths David Gibson 2025-03-26 14:44:01 +11:00
cf4d3f05c9 packet: Upgrade severity of most packet errors David Gibson 2025-03-17 20:24:24 +11:00
0857515c94 packet: ASSERT on signs of pool corruption David Gibson 2025-03-17 20:24:23 +11:00
9153aca15b util: Add abort_with_msg() and ASSERT_WITH_MSG() helpers David Gibson 2025-03-17 20:24:22 +11:00
38bcce9977 packet: Rework packet_get() versus packet_get_try() David Gibson 2025-03-17 20:24:21 +11:00
961aa6a0eb packet: Move checks against PACKET_MAX_LEN to packet_check_range() David Gibson 2025-03-17 20:24:20 +11:00
37d9f374d9 packet: Avoid integer overflows in packet_get_do() David Gibson 2025-03-17 20:24:19 +11:00
c48331ca51 packet: Correct type of PACKET_MAX_LEN David Gibson 2025-03-17 20:24:18 +11:00
9866d146e6 tap: Clarify calculation of TAP_MSGS David Gibson 2025-03-17 20:24:17 +11:00
a41d6d125e tap: Make size of pool_tap[46] purely a tuning parameter David Gibson 2025-03-17 20:24:16 +11:00
e43e00719d packet: More cautious checks to avoid pointer arithmetic UB David Gibson 2025-03-17 20:24:15 +11:00
4592719a74 vu_common: Tighten vu_packet_check_range() David Gibson 2025-03-17 20:24:14 +11:00
32f6212551 Makefile: Enable -Wformat-security 2025_03_20.32f6212 Stefano Brivio 2025-03-19 20:45:12 +01:00
07c2d584b3 conf: Include libgen.h for basename(), fix build against musl Stefano Brivio 2025-03-19 20:43:47 +01:00
ebdd46367c tcp: Flush socket before checking for more data in active close state Stefano Brivio 2025-03-19 17:57:45 +01:00
c250ffc5c1 migrate: Bump migration version number David Gibson 2025-03-19 16:14:23 +11:00
cfb3740568 migrate, tcp: Migrate RFC 7323 timestamp David Gibson 2025-03-19 16:14:22 +11:00
28772ee91a migrate, tcp: More careful marshalling of mss parameter during migration David Gibson 2025-03-19 16:14:21 +11:00
51f3c071a7 passt-repair: Fix build with -Werror=format-security Stefano Brivio 2025-03-18 17:18:47 +01:00