Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-01-31 | iptables: enable TCP matching with "-m tcp". | Kevin Krakauer | |
A couple other things that changed: - There's a proper extension registration system for matchers. Anyone adding another matcher can use tcp_matcher.go or udp_matcher.go as a template. - All logging and use of syserr.Error in the netfilter package happens at the highest possible level (public functions). Lower-level functions just return normal, descriptive golang errors. | |||
2020-01-31 | Internal change. | gVisor bot | |
PiperOrigin-RevId: 292587459 | |||
2020-01-30 | Merge branch 'master' into ipt-udp-matchers | Kevin Krakauer | |
2020-01-30 | Merge release-20200127.0-37-g757b2b8 (automated) | gVisor bot | |
2020-01-30 | Merge pull request #1288 from lubinszARM:pr_ring0_6 | gVisor bot | |
PiperOrigin-RevId: 292369598 | |||
2020-01-30 | Merge release-20200127.0-35-gede8dfa (automated) | gVisor bot | |
2020-01-30 | Enforce splice offset limits | Michael Pratt | |
Splice must not allow negative offsets. Writes also must not allow offset + size to overflow int64. Reads are similarly broken, but not just in splice (b/148095030). Reported-by: syzbot+0e1ff0b95fb2859b4190@syzkaller.appspotmail.com PiperOrigin-RevId: 292361208 | |||
2020-01-30 | Merge release-20200127.0-31-g51b7835 (automated) | gVisor bot | |
2020-01-29 | Add support for TCP_DEFER_ACCEPT. | Bhasker Hariharan | |
PiperOrigin-RevId: 292233574 | |||
2020-01-29 | Merge branch 'master' into ipt-udp-matchers | Kevin Krakauer | |
2020-01-29 | Merge release-20200127.0-30-g148fda6 (automated) | gVisor bot | |
2020-01-29 | Add plumbing for file locks in VFS2. | Dean Deng | |
Updates #1480 PiperOrigin-RevId: 292180192 | |||
2020-01-29 | Merge release-20200127.0-29-g37bb502 (automated) | gVisor bot | |
2020-01-29 | sentry: rename SetRSEQInterruptedIP to SetOldRSeqInterruptedIP for arm64 | Andrei Vagin | |
For amd64, this has been done on cl/288342928. PiperOrigin-RevId: 292170856 | |||
2020-01-29 | Add //pkg/sentry/devices/memdev. | Jamie Liu | |
PiperOrigin-RevId: 292165063 | |||
2020-01-29 | supporting sError in guest kernel on Arm64 | Bin Lu | |
For test case 'TestBounce', we use KVM_SET_VCPU_EVENTS to trigger sError to leave guest. Signed-off-by: Bin Lu <bin.lu@arm.com> | |||
2020-01-29 | Merge release-20200127.0-27-g4cb55a7 (automated) | gVisor bot | |
2020-01-28 | Prevent arbitrary size allocation when sending UDS messages. | Dean Deng | |
Currently, Send() will copy data into a new byte slice without regard to the original size. Size checks should be performed before the allocation takes place. Note that for the sake of performance, we avoid putting the buffer allocation into the critical section. As a result, the size checks need to be performed again within Enqueue() in case the limit has changed. PiperOrigin-RevId: 292058147 | |||
2020-01-29 | Merge release-20200127.0-26-g396c574 (automated) | gVisor bot | |
2020-01-28 | Add support for WritableSource in DynamicBytesFileDescriptionImpl | Fabricio Voznika | |
WritableSource is a convenience interface used for files that can be written to, e.g. /proc/net/ipv4/tpc_sack. It reads max of 4KB and only from offset 0 which should cover most cases. It can be extended as neeed. Updates #1195 PiperOrigin-RevId: 292056924 | |||
2020-01-29 | Merge release-20200115.0-127-g3d046fe (automated) | gVisor bot | |
2020-01-28 | Changes missing in last submit | Fabricio Voznika | |
Updates #1487 Updates #1623 PiperOrigin-RevId: 292040835 | |||
2020-01-28 | Merge release-20200115.0-125-g437c986 (automated) | gVisor bot | |
2020-01-28 | Add vfs.FileDescription to FD table | Fabricio Voznika | |
FD table now holds both VFS1 and VFS2 types and uses the correct one based on what's set. Parts of this CL are just initial changes (e.g. sys_read.go, runsc/main.go) to serve as a template for the remaining changes. Updates #1487 Updates #1623 PiperOrigin-RevId: 292023223 | |||
2020-01-28 | Add //pkg/sentry/fsimpl/devtmpfs. | Jamie Liu | |
PiperOrigin-RevId: 292021389 | |||
2020-01-28 | Merge release-20200115.0-122-gf263801 (automated) | gVisor bot | |
2020-01-28 | fs/splice: don't report partial errors for special files | Andrei Vagin | |
Special files can have additional requirements for granularity. For example, read from eventfd returns EINVAL if a size is less 8 bytes. Reported-by: syzbot+3905f5493bec08eb7b02@syzkaller.appspotmail.com PiperOrigin-RevId: 292002926 | |||
2020-01-28 | Merge release-20200115.0-121-g34fbd84 (automated) | gVisor bot | |
2020-01-28 | Add VFS2 support for epoll. | Jamie Liu | |
PiperOrigin-RevId: 291997879 | |||
2020-01-28 | Merge release-20200115.0-120-gd99329e (automated) | gVisor bot | |
2020-01-28 | netlink: add support for RTM_F_LOOKUP_TABLE | Jianfeng Tan | |
Test command: $ ip route get 1.1.1.1 Fixes: #1099 Signed-off-by: Jianfeng Tan <henry.tjf@antfin.com> COPYBARA_INTEGRATE_REVIEW=https://github.com/google/gvisor/pull/1121 from tanjianfeng:fix-1099 e6919f3d4ede5aa51a48b3d2be0d7a4b482dd53d PiperOrigin-RevId: 291990716 | |||
2020-01-28 | Merge release-20200115.0-119-g1119644 (automated) | gVisor bot | |
2020-01-28 | Implement an anon_inode equivalent for VFS2. | Jamie Liu | |
PiperOrigin-RevId: 291986033 | |||
2020-01-28 | Merge release-20200115.0-118-g76483b8 (automated) | gVisor bot | |
2020-01-28 | Check sigsetsize in rt_sigaction | Michael Pratt | |
This isn't in the libc wrapper, but it is in the syscall itself. Discovered by @xiaobo55x in #1625. PiperOrigin-RevId: 291973931 | |||
2020-01-28 | Merge release-20200115.0-113-gdb68c85 (automated) | gVisor bot | |
2020-01-27 | Address GH comments. | Kevin Krakauer | |
2020-01-27 | Merge pull request #1561 from zhangningdlut:chris_tty | gVisor bot | |
PiperOrigin-RevId: 291821850 | |||
2020-01-27 | Merge release-20200115.0-110-g0e2f1b7 (automated) | gVisor bot | |
2020-01-27 | Update package locations. | Adin Scannell | |
Because the abi will depend on the core types for marshalling (usermem, context, safemem, safecopy), these need to be flattened from the sentry directory. These packages contain no sentry-specific details. PiperOrigin-RevId: 291811289 | |||
2020-01-27 | Merge release-20200115.0-107-g90ec596 (automated) | gVisor bot | |
2020-01-27 | Fix licenses. | Adin Scannell | |
The preferred Copyright holder is "The gVisor Authors". PiperOrigin-RevId: 291786657 | |||
2020-01-27 | Merge release-20200115.0-105-g13c1f38 (automated) | gVisor bot | |
2020-01-27 | Update bug number for supporting extended attribute namespaces. | Dean Deng | |
PiperOrigin-RevId: 291774815 | |||
2020-01-27 | Cleanup for GH review. | Kevin Krakauer | |
2020-01-27 | Standardize on tools directory. | Adin Scannell | |
PiperOrigin-RevId: 291745021 | |||
2020-01-27 | Merge branch 'master' into ipt-udp-matchers | Kevin Krakauer | |
2020-01-24 | We can now actually write out the udp matcher. | Kevin Krakauer | |
2020-01-24 | Add support for device special files to VFS2 tmpfs. | Jamie Liu | |
PiperOrigin-RevId: 291471892 | |||
2020-01-24 | Merge release-20200115.0-98-gd135b5a (automated) | gVisor bot | |