Fenrir fixes 2026 10 01 - #183

Merged

gasbytes merged 15 commits into

wolfSSL:masterfrom

danielinux:fenrir-fixes-2026-10-01

Oct 1, 2026

Commits on Oct 1, 2026

F-14518: retransmit the FIN and time out in TCP_CLOSING
danielinux
committed
a42f149
F-14519: probe and time out window-blocked teardown sockets
danielinux
committed
de9ac85
F-14489: skip DAD when a renew/rebind ACK keeps the in-use IP
danielinux
committed
bd6f4a2
F-14490: clear is_listener when the filter vetoes listen()
danielinux
committed
edfcccf
F-14491: stop flush_tcp_tx from walking the stale cursor after a pop
danielinux
committed
29ce82f
F-14496: drop the dead second closed-socket guard in tcp_process_ts
danielinux
committed
ba4f5ce
docs: record the TCP urgent-data scope decision
danielinux
committed
ff28447
F-14497: log wc_AesGcmEncrypt, not wc_AesGcmDecrypt, on encrypt failure
danielinux
committed
9d9bd9b
F-14493: wildcard-bound sockets source from the egress interface
danielinux
committed
974a47f
F-14494: resolve the ICMP connect target before the bound-address check
danielinux
committed
b8f5ba1
F-14492: compare bind claims, not resolved egress IPs, in the port-conflict check
danielinux
committed
fe18fb4
PR 183 Copilot fixes: persist accepts CLOSING teardown, stops only when the window fits the head segment, and a rebind ACK may come from a foreign server
danielinux
committed
df11048
Review fixes: fresh persist budget at close, ICMP ingress matches the bind claim, rebind accepts foreign-server NAKs
danielinux
committed
e80f71c
Copilot re-review: allocate TCP ephemerals against the bind claim; keep the server-ID presence check unconditional in REBINDING
danielinux
committed
aab4903
Fix the endpoint in the wildcard-:0 connect test comment (10.0.1.1, not 192.168.1.1)
danielinux
committed
feeb01b

Navigation Menu

Fenrir fixes 2026 10 01 - #183

Fenrir fixes 2026 10 01#183
gasbytes merged 15 commits into
wolfSSL:masterfrom
danielinux:fenrir-fixes-2026-10-01

Commits on Oct 1, 2026

F-14518: retransmit the FIN and time out in TCP_CLOSING

F-14519: probe and time out window-blocked teardown sockets

F-14489: skip DAD when a renew/rebind ACK keeps the in-use IP

F-14490: clear is_listener when the filter vetoes listen()

F-14491: stop flush_tcp_tx from walking the stale cursor after a pop

F-14496: drop the dead second closed-socket guard in tcp_process_ts

docs: record the TCP urgent-data scope decision

F-14497: log wc_AesGcmEncrypt, not wc_AesGcmDecrypt, on encrypt failure

F-14493: wildcard-bound sockets source from the egress interface

F-14494: resolve the ICMP connect target before the bound-address check

F-14492: compare bind claims, not resolved egress IPs, in the port-conflict check

PR 183 Copilot fixes: persist accepts CLOSING teardown, stops only when the window fits the head segment, and a rebind ACK may come from a foreign server

Review fixes: fresh persist budget at close, ICMP ingress matches the bind claim, rebind accepts foreign-server NAKs

Copilot re-review: allocate TCP ephemerals against the bind claim; keep the server-ID presence check unconditional in REBINDING

Fix the endpoint in the wildcard-:0 connect test comment (10.0.1.1, not 192.168.1.1)