Commit Graph

2484 Commits

Author SHA1 Message Date
gVisor bot d06b2545fa Merge release-20191114.0-30-g0416c24 (automated) 2019-11-25 19:08:48 +00:00
gVisor bot 0416c247ec Merge pull request #1176 from xiaobo55x:runsc_boot
PiperOrigin-RevId: 282382564
2019-11-25 11:01:22 -08:00
gVisor bot 56d7dc03b7 Merge release-20191114.0-28-g1641338 (automated) 2019-11-25 17:40:04 +00:00
Kevin Krakauer 1641338b14 Set transport and network headers on outbound packets.
These are necessary for iptables to read and parse headers for packet filtering.

PiperOrigin-RevId: 282372811
2019-11-25 09:37:53 -08:00
gVisor bot 4fa6994346 Merge release-20191114.0-27-g2b1b51f (automated) 2019-11-25 17:14:51 +00:00
Kevin Krakauer 2b1b51f1d7 Fix panic in sniffer.
Packets written via SOCK_RAW are guaranteed to have network headers, but not
transport headers. Check first whether there are enough bytes left in the packet
to contain a transport header before attempting to parse it.

PiperOrigin-RevId: 282363895
2019-11-25 09:11:05 -08:00
gVisor bot 60cdc9c849 Merge release-20191114.0-26-gc3b93af (automated) 2019-11-24 07:58:47 +00:00
Adin Scannell c3b93afeaf Cleanup visibility.
PiperOrigin-RevId: 282194656
2019-11-23 23:54:41 -08:00
gVisor bot 9ee0687661 Merge release-20191114.0-25-gb0a1bbd (automated) 2019-11-23 01:00:25 +00:00
Adin Scannell b0a1bbd3e2 Internal change.
PiperOrigin-RevId: 282068093
2019-11-22 16:56:31 -08:00
gVisor bot a9af318351 Merge release-20191114.0-24-g5eb5221 (automated) 2019-11-22 23:51:15 +00:00
Michael Pratt 5eb522193c Force timezone initialization before filter installation
The first use of time.Local (usually via time.Time.Date, et. al) performs
initialization of the local timezone, which involves open several tzdata files
from the host.

Since filter installation disallows open, we should explicitly force this
initialization rather than implicitly depending on the first logging (or other
time) call occurring before filter installation.

PiperOrigin-RevId: 282053121
2019-11-22 15:47:15 -08:00
gVisor bot 3dd882b454 Merge release-20191114.0-23-g8eb6891 (automated) 2019-11-22 23:23:11 +00:00
Ian Gudger 8eb68912e4 Store SO_BINDTODEVICE state at bind.
This allows us to ensure that the correct port reservation is released.

Fixes #1217

PiperOrigin-RevId: 282048155
2019-11-22 15:20:52 -08:00
gVisor bot be617b8a62 Merge release-20191114.0-22-g9db08c4 (automated) 2019-11-22 22:59:06 +00:00
Kevin Krakauer 9db08c4e58 Use PacketBuffers with GSO.
PiperOrigin-RevId: 282045221
2019-11-22 14:52:35 -08:00
gVisor bot 70f9648aac Merge release-20191114.0-21-gf27f38d (automated) 2019-11-22 21:19:18 +00:00
Mithun Iyer f27f38d137 Add segment dequeue check while emptying segment queue.
PiperOrigin-RevId: 282023891
2019-11-22 13:15:33 -08:00
gVisor bot 7912c51bc9 Merge release-20191114.0-20-g07635d2 (automated) 2019-11-22 20:07:49 +00:00
lubinszARM 07635d20d4 enable ring0/pagetables to support arm64
Signed-off-by: Bin Lu <bin.lu@arm.com>
COPYBARA_INTEGRATE_REVIEW=https://github.com/google/gvisor/pull/891 from lubinszARM:pr_pagetable 2385de75a8662af3ab1ae289dd74dd0e5dcfaf66
PiperOrigin-RevId: 282013224
2019-11-22 12:05:35 -08:00
gVisor bot f504f6981c Merge release-20191114.0-19-g4e27ba3 (automated) 2019-11-22 19:01:48 +00:00
Andrei Vagin 4e27ba372e tests: include sys/socket.h before linux/if_arp.h
This is how it has to be accoding to the man page.

PiperOrigin-RevId: 281998068
2019-11-22 10:57:11 -08:00
gVisor bot b3f49ebd74 Merge release-20191114.0-18-gc0f89eb (automated) 2019-11-21 19:43:52 +00:00
Adin Scannell c0f89eba6e Import and structure cleanup.
PiperOrigin-RevId: 281795269
2019-11-21 11:41:30 -08:00
gVisor bot 158f38053d Merge release-20191114.0-17-gb6a00aa (automated) 2019-11-20 23:43:22 +00:00
Adin Scannell b6a00aa375 Use a GitHub credential for tagging a release.
PiperOrigin-RevId: 281617882
2019-11-20 15:39:34 -08:00
gVisor bot bd17bba359 Merge release-20191114.0-16-g012102e (automated) 2019-11-20 23:12:35 +00:00
Nicolas Lacasse 012102eefd Pass OpenTruncate to gofer in Open call when opening file with O_TRUNC.
Note that the Sentry still calls Truncate() on the file before calling Open.

A new p9 version check was added to ensure that the p9 server can handle the
the OpenTruncate flag. If not, then the flag is stripped before sending.

PiperOrigin-RevId: 281609112
2019-11-20 15:07:16 -08:00
gVisor bot a98f44c872 Merge release-20191114.0-15-gef6f936 (automated) 2019-11-19 00:30:13 +00:00
Jamie Liu ef6f936254 Add vfs.GenericParseMountOptions().
Equivalent to fs.GenericMountSourceOptions().

PiperOrigin-RevId: 281179287
2019-11-18 16:26:28 -08:00
gVisor bot 34cd8270b2 Merge release-20191114.0-14-g26b3341 (automated) 2019-11-18 22:58:57 +00:00
Andrei Vagin 26b3341b9a platform/ptrace: use host.GetCPU instead of the getcpu syscall
This should save ~200ns from switchToApp (on ptrace too). // mpratt

PiperOrigin-RevId: 281159895
2019-11-18 14:56:49 -08:00
gVisor bot fb97248393 Merge release-20191114.0-13-g235a96c (automated) 2019-11-18 19:59:51 +00:00
gVisor bot 235a96cab1 Merge pull request #1177 from xiaobo55x:fs_host
PiperOrigin-RevId: 281112758
2019-11-18 11:50:44 -08:00
gVisor bot ac49b282fd Merge release-20191104.0-49-g9601943 (automated) 2019-11-18 19:26:40 +00:00
Adin Scannell 9601943685 release: fix tag script
The tag script, when not run interactively, will fail without a provided commit
message (since it now uses annotated tags). For now, use a trivial message. In
the future, this could be extended to provide automated release notes.

PiperOrigin-RevId: 281112651
2019-11-18 11:22:38 -08:00
gVisor bot ae7795fc13 Merge release-20191104.0-48-g5107e6b (automated) 2019-11-16 00:56:39 +00:00
Bhasker Hariharan 5107e6b6bd Automated rollback of changelist 280594395
PiperOrigin-RevId: 280763655
2019-11-15 16:52:34 -08:00
gVisor bot ba382b592f Merge release-20191104.0-47-g3e534f2 (automated) 2019-11-15 20:22:31 +00:00
Mithun Iyer 3e534f2974 Handle in-flight TCP segments when moving to CLOSE.
As we move to CLOSE state from LAST-ACK or TIME-WAIT,
ensure that we re-match all in-flight segments to any
listening endpoint.

Also fix LISTEN state handling of any ACK segments as per RFC793.

Fixes #1153

PiperOrigin-RevId: 280703556
2019-11-15 12:11:36 -08:00
gVisor bot be58d8f293 Merge release-20191104.0-46-g76039f8 (automated) 2019-11-15 19:48:29 +00:00
Jamie Liu 76039f8959 Do not set finalizer on p9.ClientFile.
Aside from the performance hit, there is no guarantee that p9.ClientFile's
finalizer runs before the associated p9.Client is closed.

PiperOrigin-RevId: 280702509
2019-11-15 11:40:52 -08:00
gVisor bot 91bc96c3e4 Merge release-20191104.0-45-g23574b1 (automated) 2019-11-15 06:57:39 +00:00
Kevin Krakauer 23574b1b87 Fix panic when logging raw packets via sniffer.
Sniffer assumed that outgoing packets have transport headers, but
users can write packets via SOCK_RAW with arbitrary transport headers that
netstack doesn't know about. We now explicitly check for the presence of network
and transport headers before assuming they exist.

PiperOrigin-RevId: 280594395
2019-11-14 22:55:15 -08:00
gVisor bot 2539a555d1 Merge release-20191104.0-44-gaf323eb (automated) 2019-11-15 01:15:23 +00:00
Ting-Yu Wang af323eb7c1 Fix return codes for {get,set}sockopt for some nullptr cases.
Updates #1092

PiperOrigin-RevId: 280547239
2019-11-14 17:04:34 -08:00
gVisor bot d078524540 Merge release-20191104.0-43-g339536d (automated) 2019-11-15 00:21:07 +00:00
Kevin Krakauer 339536de5e Check that a file is a regular file with open(O_TRUNC).
It was possible to panic the sentry by opening a cache revalidating folder with
O_TRUNC|O_CREAT.

Avoids breaking php tests.

PiperOrigin-RevId: 280533213
2019-11-14 16:08:34 -08:00
gVisor bot 75d810f36b Merge release-20191104.0-42-g1e1f5ce (automated) 2019-11-14 23:15:32 +00:00
Kevin Krakauer 1e1f5ce082 Allow all runtime tests for a language to be run via a single command.
This was intended behavior per the README, but running tests without the --test
flag caused an error. Users can now omit the --test flag to run every test for a
runtime.

PiperOrigin-RevId: 280522025
2019-11-14 15:06:04 -08:00