Exact

Exact Union RegExp

Danila Gornushko db77076d0d fix(kmod): hide VPN ifaces from the SIOCGIFCONF size query, not just the fill (#213) ... The classic two-step SIOCGIFCONF enumeration first calls with ifc_req == NULL to learn the buffer size (the kernel returns ifc_len = N * sizeof(struct ifreq) without copying anything), then calls again with a sized buffer. sock_ioctl_ret filtered the fill but bailed on the NULL probe, so the size query returned the unfiltered count — a target comparing the two back-to-back saw a one-interface discrepancy that revealed a hidden VPN. sock_ioctl_ret now also handles ifc_req == NULL: it rcu-enumerates the socket's netns netdevs (net captured at entry from the socket, matching dev_ifconf's sock_net) and subtracts sizeof(struct ifreq) per IPv4-addressed VPN iface, matched by ifa_label — the exact set and naming inet_gifconf would have emitted — so the size query agrees with the filtered fill. Validated by a new harness vector (ifconf_size_probe, via kmod/test/ifconf-probe.c) asserting a target's size query equals its filtered fill and drops below the non-target size query: 19/19 PASS, no panic, on GKI 6.1 and 6.6 in QEMU; CI covers the remaining KMIs once the ddk-qemu image rebuilds with the new probe. The 32-bit compat SIOCGIFCONF path (compat_sock_ioctl) remains unhooked and is tracked in docs as low priority. The KPM backend's filter_ifconf still bails on the NULL probe (raw netdev walking by per-kver offset is not worth it for the legacy probe) and is noted as WIP parity.		2026-06-30 15:52:13 +03:00
..
ci-image.yml	Improve GitHub workflow maintenance	2026-06-22 19:07:01 +03:00
ci.yml	Pin C formatting to clang-format 18	2026-06-29 02:55:57 +03:00
claude-code-review.yml	Improve GitHub workflow maintenance	2026-06-22 19:07:01 +03:00
claude.yml	Improve GitHub workflow maintenance	2026-06-22 19:07:01 +03:00
qemu-image.yml	fix(kmod): hide VPN ifaces from the SIOCGIFCONF size query, not just the fill (#213)	2026-06-30 15:52:13 +03:00