| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
|
|
|
|
Co-authored-by: David Lönnhager <david.l@mullvad.net>
|
|
- Add local wireguard go import
- Activate DAITA and add `wgActivateDaita` and `wgReceiveEvent` FFI
- Implement `start_daita` on Wireguard-go tunnel type
- Mention DAITA in `wireguard-go-rs` description
- Do not compile `wireguard-go-rs` on Windows
- Handle DAITA closed on `nil` event
- Handle daita action timeouts in libwg
- Remove noisy log lines
- Remove `maybenot_on_action` callback
- Remove unused link to `../build/lib` for `talpid-wireguard`
- Bump the `wireguard-go` submodule to a signed release tag in Mullvad's
`wireguard-go` fork.
- Update path to `libwg/go.sum` in verification script
Also:
- Use u64 instead of *mut void as log context
- Make Tunnel::set_config take a &mut self
- Use dyn Error instead of i32s for wg errors
Co-authored-by: Joakim Hulthe <joakim@hulthe.net>
|
|
|
|
This update fixes RUSTSEC-2024-0344.
|
|
Co-authored-by: Jonatan Rhodin <jonatan.rhodin@mullvad.net>
Co-authored-by: Markus Pettersson <markus.pettersson@mullvad.net>
Co-authored-by: David Lönnhager <david.l@mullvad.net>
|
|
Signed-off-by: Bug Magnet <marco.nikic@mullvad.net>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
The patch for handling shut down sockets is included
|
|
This includes a function to clear connection states
|
|
|
|
|
|
|
|
Implement a system built on 'queries' for selecting appropriate relays.
A query is a set of constraints which dictates which relay(s) that *can*
be chosen by the relay selector.
The user's settings can naturally be expressed as a query. The semantics
of merging two queries in a way that always prefer user settings is
defined by the new `Intersection` trait.
Split `mullvad-relay-selector` into several modules:
- `query.rs`: Definition of a query on different types of relays. This
module is integral to the new API of `mullvad-relay-selector`
- `matcher.rs`: Logic for filtering out candidate relays based on a
query.
- `detailer.rs`: Logic for deriving connection details for the selected
relay.
- `tests/`: Integration tests for the new relay selector. These tests
only use the public APIs of `RelaySelector` and make sure that the
output matches the expected output in different scenarios.
|
|
We should avoid depending on git repositories outside our own control.
The hickory-dns organization or repository can go away at any point in
time. That will make it way harder to re-build old versions of the app.
|
|
|
|
Fixing hypothetical denial of service due to ever growing memory usage.
Not possible to exploit in our app. 2/3 usages is in build dependencies.
Only usage inside the built app is via is-terminal which does not use
`rustix::fs::Dir`.
https://osv.dev/vulnerability/GHSA-c827-hfw6-qwvm
|
|
Only used via shadowsocks-rust, which is used for obfuscation by us. And
we don't rely on the cryptographic security of obfuscation anyway, so
this is not harmful to us, but good to upgrade away from vulns
https://osv.dev/vulnerability/CVE-2023-42811
|
|
|
|
This also fixes the issue of not handling closed sockets gracefully
|
|
|
|
|
|
|
|
|
|
`err_derive` is unmaintained and will probably stop working with rust
edition 2024. `thiserror` is almost a drop-in replacement. This commit
simply replaces all occurences of `derive(err_derive::Error)` with
`derive(thiserror::Error)` and fixes the attributes, but the Error and
Display impls should be identical.
|
|
Move `mullvad-relay-selector::relay_updater` to the `mullvad-daemon`.
The implications of this is that `mullvad-relay-selector` can drop the
dependency on both `mullvad-api` and `tokio`, which brings down the
total amount of dependencies when running a simple `Cargo check` from
250+ down to a mere 75. :-)
|
|
|
|
|
|
Refactor some parts of `talpid-core` to `talpid-future`.
|
|
|
|
|
|
|
|
|
|
Expose the functionally for calling `RtlGetVersion` from
`talpid-platform-metadata` through `mullvad-nsis`. This is used for
getting the Windows build version during the windows installer.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
