Bhasker Hariharan

SPIIOCTransfer struct is missing fields

2

I had been banging my head against SPI transfer randomly deciding to bork with an invalid fd error and finally i figured there was something weird in the bus driver....

### Description See: https://github.com/google/gvisor/blob/0c3abacb1c8cf11b914eb6be46dacaff0a993ebf/pkg/sentry/syscalls/linux/sys_socket.go#L50 vs https://github.com/google/gvisor/blob/8643fe526e2be65ff375c669c31e2b29c134654c/pkg/sentry/fsimpl/proc/tasks_sys.go#L132 ### Steps to reproduce _No response_ ### runsc version _No response_ ### docker version (if using docker) _No response_ ### uname _No response_ ###...

TCP conntrack does not honor window sizes correctly.

9

### Description tcpconntrack package uses the segment's window size specified in the TCP segment header to determine if an incoming segment is acceptable. But it doesn't take into account any...

### Description Linux always retransmits the SYN immediately when a peer sends a challenge ACK. This makes sense since the peer by issuing a challenge ACK is letting us know...

### Description CurrentConnected metric is decremented when a connection is RST or a shutdown (in resetConnectionLocked/transitionToStateCloseLocked. But in the TCP processor we end up decrementing it again which can lead...

### Description When entering TIME-WAIT we should stop all timers and only have the timeWait timer running. After the refactor to remove the endpoint goroutines this manifests in sometimes a...

IPTables incorrectly adds an established connection as a connecting connection in conntrack

2

### Description https://github.com/google/gvisor/blob/81f284f9d4af4170c86ad182e2f6f2cc9b3c565a/pkg/tcpip/stack/conntrack.go#L161 incorrectly is initializing the TCB without checking if the incoming segment has a SYN. See: https://github.com/google/gvisor/blob/108410638aa8480e82933870ba8279133f543d2b/pkg/tcpip/transport/tcpconntrack/tcp_conntrack.go#L70 which expects the header to be the SYN header. This means...

Make envoye2e bazel buildable

1

(This is used to request new product features, please visit for questions on using Istio) **Describe the feature request** The istio/proxy envoye2e tests are only runnable/testable via the go tool...

cri-o support

21

### Description I have been tinkering to get runsc to work with crio and I think I have it mostly working. Except for the fact that initContainers don't seem to...

runsc: PacketMMAP dispatch mode is buggy.

9

TPACKEtv1/v2 PACKET_RX|TX_RING buffers have a kernel bug where multiple kernel threads can incorrectly assume control of a ring buffer entry resulting in the ring buffer being out of sync with...