gvisor - Container Runtime Sandbox

Age	Commit message (Collapse)	Author
2020-10-09	test/syscall/iptables: don't use designated initializers	Andrei Vagin
	test/syscalls/linux/iptables.cc:130:3: error: C99 designator 'name' outside aggregate initializer 130 \| }; \| PiperOrigin-RevId: 336331738
2020-09-29	iptables: refactor to make targets extendable	Kevin Krakauer
	Like matchers, targets should use a module-like register/lookup system. This replaces the brittle switch statements we had before. The only behavior change is supporing IPT_GET_REVISION_TARGET. This makes it much easier to add IPv6 redirect in the next change. Updates #3549. PiperOrigin-RevId: 334469418
2020-08-28	fix panic when calling SO_ORIGINAL_DST without initializing iptables	Kevin Krakauer
	Reported-by: syzbot+074ec22c42305725b79f@syzkaller.appspotmail.com PiperOrigin-RevId: 328963899
2020-08-25	remove iptables sockopt special cases	Kevin Krakauer
	iptables sockopts were kludged into an unnecessary check, this properly relegates them to the {get,set}SockOptIP functions. PiperOrigin-RevId: 328395135
2020-08-19	ip6tables: test initial state	Kevin Krakauer
	Tests that we have the correct initial (empty) state for ip6tables. #3549 PiperOrigin-RevId: 327477657
2019-08-19	Read iptables via sockopts.	Kevin Krakauer
	PiperOrigin-RevId: 264180125