1. 17 Sep, 2013 3 commits
    • Andrey Vagin's avatar
      iptables: use OUTPUT table to block locally-generated packet · 522fa170
      Andrey Vagin authored
      We was going to block a connections in both directions (v0.6-97-g0a1b70bb),
      but both iptable rules are added in the INPUT table. It's wrong, because
      the rule must be added to the OUTPUT table to block locally-generated packets
      Signed-off-by: 's avatarAndrey Vagin <avagin@openvz.org>
      Signed-off-by: 's avatarPavel Emelyanov <xemul@parallels.com>
      522fa170
    • Andrey Vagin's avatar
      sockets: don't double buffer size for sockets · 1fd180ca
      Andrey Vagin authored
      SO_SNDBUF and SO_RCVBUF sets a double input value, because
      "Linux reserves half of te socket buffer for metadata."
      
      So if a process is suspended/restored many times, a socket buffer
      size is doubled on each iteration and in a one moment it is overflowed.
      Very likely the program hangs in such situation, because the socket with
      negative buffer size is unusable.
      Signed-off-by: 's avatarAndrey Vagin <avagin@openvz.org>
      Acked-by: 's avatarCyrill Gorcunov <gorcunov@openvz.org>
      Signed-off-by: 's avatarPavel Emelyanov <xemul@parallels.com>
      1fd180ca
    • Alexander Kolesen's avatar
      Make gen-syscalls.pl compatible with perl < 5.13.2 · 14f98abf
      Alexander Kolesen authored
      An error occurs when trying to build crtools on ARM systems
      with perl versions earlier than 5.13.2 due to lack of /r modifier.
      
      % make
      ...
        GEN      arch/arm/syscalls.S
      Bareword found where operator expected at arch/arm/gen-syscalls.pl line 8, near "s/.*include\///gr"
      Bareword found where operator expected at arch/arm/gen-syscalls.pl line 10, near "s/.*include\///gr"
      Bareword found where operator expected at arch/arm/gen-syscalls.pl line 13, near "s/.*include\///gr"
      Bareword found where operator expected at arch/arm/gen-syscalls.pl line 16, near "tr/.-/_/r"
      Bareword found where operator expected at arch/arm/gen-syscalls.pl line 17, near "tr/.-/_/r"
      syntax error at arch/arm/gen-syscalls.pl line 8, near "s/.*include\///gr"
      syntax error at arch/arm/gen-syscalls.pl line 10, near "s/.*include\///gr"
      syntax error at arch/arm/gen-syscalls.pl line 13, near "s/.*include\///gr"
      syntax error at arch/arm/gen-syscalls.pl line 16, near "tr/.-/_/r"
      syntax error at arch/arm/gen-syscalls.pl line 17, near "tr/.-/_/r"
      BEGIN not safe after errors--compilation aborted at arch/arm/gen-syscalls.pl line 60.
      make[1]: *** No rule to make target `arch/arm/syscalls.S', needed by `arch/arm/syscalls.o'.  Stop.
      Signed-off-by: 's avatarAlexander Kolesen <kolesen.a@gmail.com>
      Acked-by: 's avatarAlexander Kartashov <alekskartashov@parallels.com>
      Signed-off-by: 's avatarPavel Emelyanov <xemul@parallels.com>
      14f98abf
  2. 16 Sep, 2013 7 commits
  3. 14 Sep, 2013 19 commits
  4. 13 Sep, 2013 6 commits
  5. 12 Sep, 2013 1 commit
  6. 10 Sep, 2013 4 commits