wireguard-apple/Sources/WireGuardKit, branch master

App: bump copyright

2023-02-15T13:20:35Z

Signed-off-by: Jason A. Donenfeld

WireGuardKit: fix incorrect IP address allocation size

2023-02-08T16:08:40Z

According to [1], the `capacity` parameter is specified as "the number of instances of T in the re-bound region" and not the total size of the rebound struct. Without this patch, there are crashes in the extension with the following error: Fatal error: self must be a properly aligned pointer for types Pointee and T` Since the subsequent line in the code only reads `sizeof(in_addr)` or `sizeof(in6_addr)` anyway, change the `capacity` parameter to just be a count of 1. [1] https://developer.apple.com/documentation/swift/unsafepointer/withmemoryrebound(to:capacity:_:) Signed-off-by: John Biggs Signed-off-by: Jason A. Donenfeld

Global: bump copyright year

2021-06-17T14:56:46Z

Signed-off-by: Jason A. Donenfeld

Kit: add missing import for WireGuardKitC

2021-06-17T13:15:41Z

Signed-off-by: Andrej Mihajlov

Kit: Adapter: use more reliable utun detection technique

2021-06-16T15:40:12Z

Rather than hoping that the AF_SYSTEM fd is of type utun, and then calling "2" on it to get the name -- which could be defined as something else for a different AF_SYSTEM socket type -- instead simply query the AF_SYSTEM control socket ID with getpeername. This has one catch, which is that the ID is dynamically allocated, so we resolve it using the qualified name. Normally we'd make a new AF_SYSTEM socket for this, but since that's not allowed in the sandbox, we reuse the AF_SYSTEM socket that we're checking. At this point in the flow, we know that it's a proper AF_SYSTEM one, based on the first sockaddr member; we just don't know that it's a utun variety. Signed-off-by: Jason A. Donenfeld

Kit: Adapter: iterate through all FDs to find UTUN

2021-06-16T13:56:21Z

This is a bit of a kludge, until I find something better. We simply iterate through all FDs, and call getsockopt on each one until we find the utun FD. This works, and completes rather quickly (fd is usually 6 or 7). Rather than maintain the old path for older kernels, just use this for all versions, to get more coverage. Other techniques involve undocumented APIs; this one has the advantage of using nothing undocumented. Signed-off-by: Jason A. Donenfeld

SPM: update exclude rules

2021-06-16T13:23:11Z

Fixes missing excluded file warning in Xcode. api-ios.go was renamed to api-apple.go. Signed-off-by: Andrej Mihajlov

Kit: Go: bump to latest API

2021-03-09T16:10:04Z

Signed-off-by: Jason A. Donenfeld

Kit: netcfg: add explicit IP mask routes

2021-01-01T17:28:14Z

macOS will use the wrong source address unless we add explicit routes that mention the self-pointing gateway. Actually, it won't add any implicit routes on its own, so in order to route the masks of the addresses, we have to add our own routes explicitly. However, this still doesn't fix the problem while inside of the network extension, even though it works outside it. Signed-off-by: Jason A. Donenfeld

Kit: do not crash on [abcd::] with missing port

2020-12-23T13:06:26Z

Signed-off-by: Jason A. Donenfeld