]> Cypherpunks repositories - gostls13.git/commit
net: delay IP protocol stack-snooping system calls
authorMikio Hara <mikioh.mikioh@gmail.com>
Fri, 14 Apr 2017 08:43:42 +0000 (17:43 +0900)
committerMikio Hara <mikioh.mikioh@gmail.com>
Sat, 15 Apr 2017 22:22:09 +0000 (22:22 +0000)
commit6694a6888b7d3740b402cd3a2b7534e4d2d45c12
treef29f85ccae36edfcfb9c9238e9b8f6f2b505290e
parentbc2931372243043842161c0a60bd2f86ef9696ee
net: delay IP protocol stack-snooping system calls

This change delays IP protocol stack-snooping system calls until the
start of connection setup for the better experience with some system
call auditing, such as seccomp on Linux. See #16789 for examples.

Also updates the documentation on favoriteAddrFamily, which is the
owner of stack-snooping system calls.

Fixes #16789.

Change-Id: I4af27bc1ed06ffb1f657b6f6381c328c1f41c66c
Reviewed-on: https://go-review.googlesource.com/40750
Run-TryBot: Mikio Hara <mikioh.mikioh@gmail.com>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Ian Lance Taylor <iant@golang.org>
20 files changed:
src/net/dial_test.go
src/net/error_test.go
src/net/external_test.go
src/net/fd_plan9.go
src/net/fd_unix.go
src/net/fd_windows.go
src/net/interface_test.go
src/net/ipsock.go
src/net/ipsock_plan9.go
src/net/ipsock_posix.go
src/net/ipsock_test.go
src/net/listen_test.go
src/net/lookup_test.go
src/net/main_test.go
src/net/mockserver_test.go
src/net/net.go
src/net/platform_test.go
src/net/sockopt_bsd.go
src/net/tcpsock_test.go
src/net/udpsock_test.go