Danny Hershko Shemesh c619177102 Refuse a veth peer attribute shorter than its ifinfomsg ...

The peer payload is sliced at the size of a struct ifinfomsg before anything measures it, so 4 bytes panic the Sentry and take the sandbox with it. Any user reaches it after unshare -Ur -n.

Check the length instead of re-testing a lookup that already succeeded. A short payload now answers EINVAL.

Fixes #14516

2026-08-31 16:08:32 +03:00

..

packetmmap

Internal change.

2026-03-03 15:12:27 -08:00

BUILD

Remove usages of save-restore-netstack flag.

2026-04-22 10:15:08 -07:00

events.proto

Emit SentryTcpListenEvent when the application listens on a tcp port.

2023-09-05 19:15:45 -07:00

netstack_state.go

checklocks: annotate network lock ownership

2026-08-26 12:56:52 -04:00

netstack.go

Merge pull request #14354 from tamird:checklocks-network-annotations

2026-08-30 15:19:19 -07:00

provider.go

Cleanup creds-related funcs and change CapError behavior

2026-01-08 17:23:58 -08:00

socketopt_custom.go

Return ENOPROTOOPT from setsockopt syscalls as default.

2025-04-16 16:22:52 -07:00

stack_test.go

Fix nil pointer dereference in netstack.Stack.

2026-03-11 14:59:32 -07:00

stack.go

Refuse a veth peer attribute shorter than its ifinfomsg

2026-08-31 16:08:32 +03:00

tun.go

netstack/tuntap: implement the IFF_TUN_EXCL flag

2025-05-07 11:59:29 -07:00