You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/wgengine
Andrew Dunham bd14112d0b
wgengine/netstack: only accept connection after dialing (#5503)
If we accept a forwarded TCP connection before dialing, we can
erroneously signal to a client that we support IPv6 (or IPv4) without
that actually being possible. Instead, we only complete the client's TCP
handshake after we've dialed the outbound connection; if that fails, we
respond with a RST.

Updates #5425 (maybe fixes!)

Signed-off-by: Andrew Dunham <andrew@tailscale.com>
(cherry picked from commit 9240f5c1e2)
3 years ago
..
bench all: convert more code to use net/netip directly 4 years ago
filter all: migrate more code code to net/netip directly 4 years ago
magicsock util/uniq: use generics instead of reflect (#5491) 3 years ago
monitor all: migrate more code code to net/netip directly 4 years ago
netstack wgengine/netstack: only accept connection after dialing (#5503) 3 years ago
router syncs, all: move to using Go's new atomic types instead of ours 4 years ago
wgcfg wgengine/wgcfg: only write peer headers if necessary (#5449) 3 years ago
wgint wgengine/wgint: add shady temporary package to get at wireguard internals 3 years ago
wglog all: use syncs.AtomicValue 4 years ago
winnet all: gofmt all 4 years ago
mem_ios.go go.mod: upgrade wireguard-windows, de-fork wireguard-go 5 years ago
pendopen.go wgengine: remove all peer status from open timeout diagnostics 3 years ago
userspace.go wgengine: remove unused singleflight group 3 years ago
userspace_ext_test.go go.mod: upgrade wireguard-windows, de-fork wireguard-go 5 years ago
userspace_test.go all: convert more code to use net/netip directly 4 years ago
watchdog.go wgengine: print in-flight operations on watchdog trigger (#5447) 3 years ago
watchdog_js.go wasm: drop pprof dependency 4 years ago
watchdog_test.go wgengine: remove all peer status from open timeout diagnostics 3 years ago
wgengine.go all: convert more code to use net/netip directly 4 years ago