aboutsummaryrefslogtreecommitdiffstatshomepage
Commit message (Collapse)AuthorAgeFilesLines
...
* netlink: plug memory leakJason A. Donenfeld2017-11-031-1/+1
|
* device: please lockdepJason A. Donenfeld2017-11-031-1/+1
|
* global: revert checkpatch.pl changesJason A. Donenfeld2017-11-022-2/+2
| | | | | These changes were suggested by checkpatch.pl, but actually cause big problems depending on the options. Revert.
* Kconfig: remove trailing whitespaceGreg Kroah-Hartman2017-11-021-1/+1
| | | | | | | Git complains when applying this Kconfig file as part of a patch to the kernel tree, so drop the trailing whitespace. Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
* version: bump snapshot0.0.20171101Jason A. Donenfeld2017-11-012-2/+2
|
* compat: unbreak unloading on kernels 4.6 through 4.9Jason A. Donenfeld2017-11-011-1/+4
|
* timers: switch to kees' new timer_list functionsJason A. Donenfeld2017-11-012-17/+22
|
* wg-quick: save all hooks on saveJason A. Donenfeld2017-11-011-5/+13
|
* version: bump snapshot0.0.20171031Jason A. Donenfeld2017-10-312-2/+2
|
* wg-quick: fsync the temporary file before renamingJason A. Donenfeld2017-10-311-0/+1
| | | | | | | This ensures that on an unclean shutdown, we either see the old content or the new content, but not empty content. Suggested-by: Ka Ho Ng <ngkaho1234@gmail.com>
* wg-quick: allow for saving existing interfaceJason A. Donenfeld2017-10-312-2/+14
|
* contrib: add reresolve-dnsJason A. Donenfeld2017-10-312-0/+48
|
* tools: correct type for CTRL_ATTR_FAMILY_IDJason A. Donenfeld2017-10-311-4/+4
| | | | Suggested-by: Jörg Thalheim <joerg@thalheim.io>
* wg-quick: allow for the hatchet, but not by defaultJason A. Donenfeld2017-10-314-0/+55
|
* global: use fewer BUG_ONsJason A. Donenfeld2017-10-312-3/+5
| | | | Suggested-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
* timers: guard entire setting in blockJason A. Donenfeld2017-10-311-4/+6
|
* curve25519: only enable int128 if compiler support is soundJason A. Donenfeld2017-10-311-1/+1
|
* device: expand scope of destruct lockJason A. Donenfeld2017-10-311-2/+2
|
* global: get rid of useless forward declarationsJason A. Donenfeld2017-10-313-11/+0
|
* device: only take reference if netns is differentJason A. Donenfeld2017-10-313-9/+56
| | | | | | If we take two references, the namespace and the device are never freed in the usual manner. We should thus only take a reference to another namespace when it is a different namespace from our own.
* wg-quick: remember to rewind DNS settings on failureJason A. Donenfeld2017-10-311-3/+8
|
* wg-quick: allow specifiying multiple hooksJason A. Donenfeld2017-10-312-18/+21
|
* qemu: test using four coresJason A. Donenfeld2017-10-311-1/+1
|
* global: style nitsJason A. Donenfeld2017-10-3127-274/+470
|
* qemu: work around ccache bugsJason A. Donenfeld2017-10-311-1/+1
|
* global: infuriating kernel iterator styleJason A. Donenfeld2017-10-3113-48/+48
| | | | | | | | | | | | | | | | | One types: for (i = 0 ... So one should also type: for_each_obj (obj ... But the upstream kernel style guidelines are insane, and so we must instead do: for_each_obj(obj ... Ugly, but one must choose his battles wisely.
* peer: store total number of peers instead of iteratingJason A. Donenfeld2017-10-313-15/+4
| | | | | | This is faster, since it means adding a new peer is O(1) instead of O(n). It's also safe to do because we're holding the device_update_lock on both the ++ and the --.
* peer: get rid of peer_for_each magicJason A. Donenfeld2017-10-313-41/+17
| | | | | | | | | Since the peer list is protected by the device_update_lock, and since items are removed from the peer list before putting their final reference, we don't actually need to take a reference when iterating. This allows us to simplify the macro considerably. Suggested-by: Johannes Berg <johannes@sipsolutions.net>
* compat: be sure to include header before testingJason A. Donenfeld2017-10-311-0/+1
| | | | Reported-by: Aaron M. D. Jones <aaronmdjones@gmail.com>
* qemu: allow for cross compilationJason A. Donenfeld2017-10-3114-98/+249
|
* crypto/avx: make sure we can actually use ymm registersJason A. Donenfeld2017-10-314-3/+23
|
* blake2: include headers for macrosJason A. Donenfeld2017-10-311-0/+2
|
* global: accept decent check_patch.pl suggestionsJason A. Donenfeld2017-10-3113-30/+44
|
* compat: fix up stat calculation for udp tunnelJason A. Donenfeld2017-10-312-5/+16
|
* stats: more robust accountingJason A. Donenfeld2017-10-314-6/+18
|
* selftest: initialize mutex in routingtable selftestJason A. Donenfeld2017-10-311-0/+2
|
* netns: use time-based test instead of quantity-basedJason A. Donenfeld2017-10-311-4/+4
|
* netns: use read built-in instead of ncat hack for dmesgJason A. Donenfeld2017-10-311-4/+2
| | | | | | | | | | This misses lines that are greater than 128 bytes -- read returns -EINVAL -- but the lines we care about anyway are less than that, so we simply keep looping and skip the bad reads when this happens. Not ideal, but probably the best we can do in pure bash. And, importantly, it's much better than streaming this over a TCP socket, which was an even uglier hack.
* version: bump snapshot0.0.20171017Jason A. Donenfeld2017-10-172-2/+2
|
* tools: account for padding being in zero attributeJason A. Donenfeld2017-10-171-0/+6
|
* tools: newline after warningJason A. Donenfeld2017-10-171-1/+1
|
* tools: styleJason A. Donenfeld2017-10-171-1/+1
|
* qemu: put hvc directive into configurationJason A. Donenfeld2017-10-172-2/+3
|
* netns: disable accept_dad for all interfacesJason A. Donenfeld2017-10-171-0/+2
| | | | | Upstream's a2d3f3e33853ef52e5f66b41c3e8ee5710aa3305 broke things in strange and confusing ways.
* tools: add pass example to wg-quick man pageJason A. Donenfeld2017-10-171-22/+9
|
* tools: don't insist on having a private keyJason A. Donenfeld2017-10-171-5/+0
| | | | | | | | | | This lets us do flexible things from wg-quick such as: PostUp = wg set %i private-key <(pass WireGuard/private-keys/%i) It also was never a very sensible policy to enforce. Suggested-by: Luis Ressel <aranea@aixah.de>
* tools: retry resolution except when fatalJason A. Donenfeld2017-10-173-21/+23
| | | | | | | | | | | | | | | | | | | The reference to this is <https://sourceware.org/glibc/wiki/NameResolver>, which mentions: "From the perspective of the application that calls getaddrinfo() it perhaps doesn't matter that much since EAI_FAIL, EAI_NONAME and EAI_NODATA are all permanent failure codes and the causes are all permanent failures in the sense that there is no point in retrying later." This should cover more early-boot situations. While we're at it, we clean up the logic a bit so that we don't have a retry message on the final non-retrying attempt. We also peer into errno when receiving EAI_SYSTEM, to report to the user what actually happened. Also, fix the quoting back tick front tick mess.
* tools: encoding: be more paranoidJason A. Donenfeld2017-10-171-2/+2
| | | | Needless, but overkill can be fun.
* Makefile: even prettier outputJason A. Donenfeld2017-10-172-3/+7
|
* qemu: newer packagesJason A. Donenfeld2017-10-171-37/+50
|