aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/README.md (unfollow)
Commit message (Collapse)AuthorFilesLines
2017-11-22chacha20poly1305: import ARM primitives from OpenSSLJason A. Donenfeld12-1032/+5515
ARMv4-ARMv8, with NEON for ARMv7 and ARMv8.
2017-11-22chacha20poly1305: import x86_64 primitives from OpenSSLSamuel Neves12-2470/+5267
x86_64 only at the moment. SSSE3, AVX, AVX2, AVX512. Signed-off-by: Samuel Neves <sneves@dei.uc.pt>
2017-11-22chacha20poly1305: add more test vectors, some of which are weirdJason A. Donenfeld1-3/+244
2017-11-22compat: new kernels have netlink fixesJason A. Donenfeld2-13/+10
2017-11-22compat: stable finally backported fixJason A. Donenfeld1-1/+1
2017-11-17qemu: use unprefixed strip when not cross-compilingJason A. Donenfeld1-1/+2
Fedora/Redhat doesn't ship with a prefixed strip, and we don't need to use it anyway when we're not cross compiling, so don't. Reported-by: Samuel Neves <sneves@dei.uc.pt>
2017-11-17tools: tighten up strtoul parsingJason A. Donenfeld2-36/+62
Reported-by: Cedric Buxin <cedric.buxin@izri.org>
2017-11-17device: uninitialize socket first in destructionJason A. Donenfeld1-2/+2
2017-11-17socket: only free socket after successful creation of newJason A. Donenfeld4-47/+35
When an interface is down, the socket port can change freely. A socket will be allocated when the interface comes up, and if a socket can't be allocated, the interface doesn't come up. However, a socket port can change while the interface is up. In this case, if a new socket with a new port cannot be allocated, it's important to keep the interface in a consistent state. The choices are either to bring down the interface or to preserve the old socket. This patch implements the latter. Reported-by: Marc-Antoine Perennou <keruspe@exherbo.org>
2017-11-14compat: fix compilation with PaXJason A. Donenfeld1-0/+12
Despite not having access to the latest grsecurity source, I still do very much want to keep supporting it, so this patch is my best guess at what will work.
2017-11-14curve25519-neon: compile in thumb modeJason A. Donenfeld3-10/+7
In thumb mode, it's not possible to use sp as an operand of and, so we have to muck around with r3 as a scratch register.
2017-11-14compat: 3.16.50 got proper rt6_get_cookieJason A. Donenfeld1-1/+1
2017-11-14qemu: update kernelJason A. Donenfeld1-1/+1
2017-11-13allowedips: do not write out of boundsJason A. Donenfeld1-2/+4
2017-11-13selftest: allowedips: randomized test mutex updateJason A. Donenfeld1-5/+6
2017-11-12wg-quick: document localhost exception and v6 ruleJason A. Donenfeld1-3/+4
Reported-by: Hermann Lienstromberg <nurtic-vibe@grmml.net>
2017-11-11version: bump snapshot0.0.20171111Jason A. Donenfeld2-2/+2
2017-11-11tools: allow for NULL keys everywhereJason A. Donenfeld5-29/+50
2017-11-11curve25519: reject deriving from NULL private keysJason A. Donenfeld2-7/+16
These aren't actually valid 25519 points pre-normalization, and doing this is required to make unsetting private keys based on all zeros.
2017-11-11tools: remove ioctl cruftJason A. Donenfeld1-4/+0
2017-11-10allowedips: rename from routingtableJason A. Donenfeld11-149/+149
Makes it more clear that this _not_ a routing table replacement.
2017-11-10wg-quick: allow for tabs in keysJason A. Donenfeld2-20/+20
2017-11-10netlink: make sure we reserve space for NLMSG_DONEJason A. Donenfeld2-1/+25
Otherwise, if messages pack really close together, we'll exceed the size of the sk_buff and return ENOBUFS. I suspect this has been the cause of a lot of weird bugs that people just worked around by increasing the receive buffer size. This actually addresses the root cause.
2017-11-10compat: 4.4.0 has strange ECN functionJason A. Donenfeld1-1/+2
2017-11-10wg-quick: stat the correct enclosing folder of config fileJason A. Donenfeld1-1/+2
2017-11-10qemu: bump kernel versionJason A. Donenfeld1-1/+1
2017-11-10receive: hoist fpu outside of receive loopJason A. Donenfeld3-18/+19
2017-11-10qemu: more debuggingJason A. Donenfeld3-1/+15
2017-11-10device: wait for all peers to be freed before destroyingJason A. Donenfeld1-0/+1
2017-11-10qemu: check for memory leaksJason A. Donenfeld3-6/+28
2017-11-03netlink: plug memory leakJason A. Donenfeld1-1/+1
2017-11-03device: please lockdepJason A. Donenfeld1-1/+1
2017-11-02global: revert checkpatch.pl changesJason A. Donenfeld2-2/+2
These changes were suggested by checkpatch.pl, but actually cause big problems depending on the options. Revert.
2017-11-02Kconfig: remove trailing whitespaceGreg Kroah-Hartman1-1/+1
Git complains when applying this Kconfig file as part of a patch to the kernel tree, so drop the trailing whitespace. Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-11-01version: bump snapshot0.0.20171101Jason A. Donenfeld2-2/+2
2017-11-01compat: unbreak unloading on kernels 4.6 through 4.9Jason A. Donenfeld1-1/+4
2017-11-01timers: switch to kees' new timer_list functionsJason A. Donenfeld2-17/+22
2017-11-01wg-quick: save all hooks on saveJason A. Donenfeld1-5/+13
2017-10-31version: bump snapshot0.0.20171031Jason A. Donenfeld2-2/+2
2017-10-31wg-quick: fsync the temporary file before renamingJason A. Donenfeld1-0/+1
This ensures that on an unclean shutdown, we either see the old content or the new content, but not empty content. Suggested-by: Ka Ho Ng <ngkaho1234@gmail.com>
2017-10-31wg-quick: allow for saving existing interfaceJason A. Donenfeld2-2/+14
2017-10-31contrib: add reresolve-dnsJason A. Donenfeld2-0/+48
2017-10-31tools: correct type for CTRL_ATTR_FAMILY_IDJason A. Donenfeld1-4/+4
Suggested-by: Jörg Thalheim <joerg@thalheim.io>
2017-10-31wg-quick: allow for the hatchet, but not by defaultJason A. Donenfeld4-0/+55
2017-10-31global: use fewer BUG_ONsJason A. Donenfeld2-3/+5
Suggested-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-10-31timers: guard entire setting in blockJason A. Donenfeld1-4/+6
2017-10-31curve25519: only enable int128 if compiler support is soundJason A. Donenfeld1-1/+1
2017-10-31device: expand scope of destruct lockJason A. Donenfeld1-2/+2
2017-10-31global: get rid of useless forward declarationsJason A. Donenfeld3-11/+0
2017-10-31device: only take reference if netns is differentJason A. Donenfeld3-9/+56
If we take two references, the namespace and the device are never freed in the usual manner. We should thus only take a reference to another namespace when it is a different namespace from our own.