wireguard-apple/Sources/WireGuardKit, branch am/default-path

Switch NSCondition to DispatchGroup

2023-03-06T11:51:05Z

Signed-off-by: Andrej Mihajlov

Kit: replace path monitor with KVO observer on defaultPath

2023-03-06T11:50:44Z

Signed-off-by: Andrej Mihajlov

App: bump copyright

2023-02-15T13:20:35Z

Signed-off-by: Jason A. Donenfeld

WireGuardKit: fix incorrect IP address allocation size

2023-02-08T16:08:40Z

According to [1], the `capacity` parameter is specified as "the number of instances of T in the re-bound region" and not the total size of the rebound struct. Without this patch, there are crashes in the extension with the following error: Fatal error: self must be a properly aligned pointer for types Pointee and T` Since the subsequent line in the code only reads `sizeof(in_addr)` or `sizeof(in6_addr)` anyway, change the `capacity` parameter to just be a count of 1. [1] https://developer.apple.com/documentation/swift/unsafepointer/withmemoryrebound(to:capacity:_:) Signed-off-by: John Biggs Signed-off-by: Jason A. Donenfeld

Global: bump copyright year

2021-06-17T14:56:46Z

Signed-off-by: Jason A. Donenfeld

Kit: add missing import for WireGuardKitC

2021-06-17T13:15:41Z

Signed-off-by: Andrej Mihajlov

Kit: Adapter: use more reliable utun detection technique

2021-06-16T15:40:12Z

Rather than hoping that the AF_SYSTEM fd is of type utun, and then calling "2" on it to get the name -- which could be defined as something else for a different AF_SYSTEM socket type -- instead simply query the AF_SYSTEM control socket ID with getpeername. This has one catch, which is that the ID is dynamically allocated, so we resolve it using the qualified name. Normally we'd make a new AF_SYSTEM socket for this, but since that's not allowed in the sandbox, we reuse the AF_SYSTEM socket that we're checking. At this point in the flow, we know that it's a proper AF_SYSTEM one, based on the first sockaddr member; we just don't know that it's a utun variety. Signed-off-by: Jason A. Donenfeld

Kit: Adapter: iterate through all FDs to find UTUN

2021-06-16T13:56:21Z

This is a bit of a kludge, until I find something better. We simply iterate through all FDs, and call getsockopt on each one until we find the utun FD. This works, and completes rather quickly (fd is usually 6 or 7). Rather than maintain the old path for older kernels, just use this for all versions, to get more coverage. Other techniques involve undocumented APIs; this one has the advantage of using nothing undocumented. Signed-off-by: Jason A. Donenfeld

SPM: update exclude rules

2021-06-16T13:23:11Z

Fixes missing excluded file warning in Xcode. api-ios.go was renamed to api-apple.go. Signed-off-by: Andrej Mihajlov

Kit: Go: bump to latest API

2021-03-09T16:10:04Z

Signed-off-by: Jason A. Donenfeld