summaryrefslogtreecommitdiffstatshomepage
Commit message (Collapse)AuthorAgeFilesLines
* version: bump snapshot0.0.20171005Jason A. Donenfeld2017-10-062-2/+2
|
* queueing: cleanup skb_paddingJason A. Donenfeld2017-10-052-14/+14
|
* compat: macro rewrite netlink instead of clutteringJason A. Donenfeld2017-10-052-19/+23
|
* Makefile: clang now builds the kernel, so use scan-buildJason A. Donenfeld2017-10-054-10/+9
| | | | | Also add little stub for coccinelle and clean up semicolon issue it found.
* queueing: move from ctx to cbJason A. Donenfeld2017-10-055-151/+119
|
* receive: do not store endpoint in ctxJason A. Donenfeld2017-10-052-6/+21
|
* compat: RHEL backported netlink changesJason A. Donenfeld2017-10-051-1/+1
|
* compat: conditionally redefine GENL_UNS_ADMIN_PERMJason A. Donenfeld2017-10-051-0/+3
|
* compat: support ptr_ring for old kernelsJason A. Donenfeld2017-10-052-0/+644
|
* queueing: use ptr_ring instead of linked listsJason A. Donenfeld2017-10-057-76/+67
|
* receive: we're not planning on turning that into a while loop nowJason A. Donenfeld2017-10-051-6/+5
|
* send: put keypair referenceJason A. Donenfeld2017-10-052-0/+20
|
* receive: use local keypair, not ctx keypair in error pathJason A. Donenfeld2017-10-031-1/+1
|
* Makefile: add non-verbose mode to toolsJason A. Donenfeld2017-10-032-2/+23
|
* global: add space around variable declarationsJason A. Donenfeld2017-10-0313-1/+59
|
* global: use _WG prefix for include guardsJason A. Donenfeld2017-10-0320-60/+60
| | | | Suggested-by: Sultan Alsawaf <sultanxda@gmail.com>
* global: satisfy bitshift pedantryJason A. Donenfeld2017-10-038-24/+24
| | | | Suggested-by: Sultan Alsawaf <sultanxda@gmail.com>
* receive: simplify message type validationJason A. Donenfeld2017-10-032-42/+33
|
* curve25519-neon-arm: force ARM encoding, since this is unrepresentable in ThumbJason A. Donenfeld2017-10-021-0/+1
|
* kernel-tree: remember UAPI in patch creationJason A. Donenfeld2017-10-021-1/+1
|
* contrib: remove worthless build artifactJason A. Donenfeld2017-10-021-0/+0
|
* tools: compile on non-LinuxJason A. Donenfeld2017-10-021-16/+22
|
* tools: simmer down silly compilersJason A. Donenfeld2017-10-021-1/+1
|
* version: bump snapshot0.0.20171001Jason A. Donenfeld2017-10-022-2/+2
|
* tools: do not warn on unrecognized itemsJason A. Donenfeld2017-10-022-26/+0
| | | | Upstream advice is to simply be silent.
* ratelimiter: wait for destruction, not for read_unlockJason A. Donenfeld2017-10-021-1/+1
|
* qemu: add watchdog for not hanging on oopsJason A. Donenfeld2017-10-023-1/+24
|
* messages: reduce maximum staged packets per peerJason A. Donenfeld2017-10-021-1/+1
|
* noise: use spinlock for rotating keysJason A. Donenfeld2017-10-023-21/+29
| | | | | This should only really be contended in extremely exceptional cases, so changing from a mutex to a spinlock is likely fine.
* wg-quick: check permissions of parent directoryJason A. Donenfeld2017-10-021-1/+1
| | | | | Also prefix octal 0, in case these files are actually of modes that don't start with 0 by accident (such as SUID or sticky bit).
* wg-quick: verify wireguard interface in more clever wayJason A. Donenfeld2017-10-021-1/+1
| | | | | This helps with old Debian which has ancient iproute2, as well as paving the path toward this script supporting userspace implementations.
* wg-quick: anchor sysctl regex to start and endJason A. Donenfeld2017-10-021-1/+1
| | | | | | | This doesn't actually fix a real problem, but it is more correct than not having it. Suggested-by: Aaron Sigel <aaron@vtty.com>
* debug: add better insert targetJason A. Donenfeld2017-10-021-4/+4
|
* peer: remove from RCU lists when the kref is zeroJason A. Donenfeld2017-10-021-4/+5
|
* timers: ensure safe timer removalJason A. Donenfeld2017-10-021-12/+17
|
* receive: do not consider netfilter drop a real dropJason A. Donenfeld2017-10-021-5/+3
|
* peer: ensure that lookup tables are added lastJason A. Donenfeld2017-10-021-3/+3
|
* netlink: switch from ioctl to netlink for configurationJason A. Donenfeld2017-10-0228-1008/+1934
|
* tools: uapi: only make sure socket file is socketJason A. Donenfeld2017-09-261-4/+9
|
* receive: mark function staticJason A. Donenfeld2017-09-261-1/+1
|
* queueing: more standard init/uninit namesJason A. Donenfeld2017-09-253-7/+7
|
* tools: use key_is_zero for comparing to zerosJason A. Donenfeld2017-09-247-24/+27
| | | | | | | Maybe an attacker on the system could use the infoleak in /proc to gauge how long a wg(8) process takes to complete and determine the number of leading zeros. This is somewhat ridiculous, but it's possible somebody somewhere might at somepoint care in the future, so alright.
* config: do not reset device portJason A. Donenfeld2017-09-241-0/+2
|
* timers: convert to use netif_runningJason A. Donenfeld2017-09-245-32/+24
|
* netns: disable rp_filter for final testJason A. Donenfeld2017-09-241-0/+4
|
* contrib: add sticky sockets example codeJason A. Donenfeld2017-09-243-0/+342
|
* queueing: rename cpumask functionJason A. Donenfeld2017-09-193-3/+3
|
* queueing: clean up worthless helperJason A. Donenfeld2017-09-191-12/+1
|
* peer: rearrange structsJason A. Donenfeld2017-09-191-4/+4
|
* device: properly arrange structsJason A. Donenfeld2017-09-191-6/+5
|
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.