netbird/gvisor
0
0
Fork 0
mirror of https://github.com/netbirdio/gvisor.git synced 2026-05-22 17:12:49 -07:00
Code Issues Packages Projects Releases Wiki Activity

Emit SentryTcpListenEvent when the application listens on a tcp port.

Browse Source 
PiperOrigin-RevId: 562957239
This commit is contained in:
Nicolas Lacasse
2023-09-05 19:15:45 -07:00
committed by gVisor bot
parent e0029cc0ff
commit c227d185a4
4 changed files with 56 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/sentry/socket/netstack/netstack.go
+19 -1
View File
@@ -35,10 +35,12 @@ import (
"time"
"golang.org/x/sys/unix"
"google.golang.org/protobuf/proto"
"gvisor.dev/gvisor/pkg/abi/linux"
"gvisor.dev/gvisor/pkg/abi/linux/errno"
"gvisor.dev/gvisor/pkg/context"
"gvisor.dev/gvisor/pkg/errors/linuxerr"
"gvisor.dev/gvisor/pkg/eventchannel"
"gvisor.dev/gvisor/pkg/hostarch"
"gvisor.dev/gvisor/pkg/log"
"gvisor.dev/gvisor/pkg/marshal"
@@ -52,6 +54,7 @@ import (
ktime "gvisor.dev/gvisor/pkg/sentry/kernel/time"
"gvisor.dev/gvisor/pkg/sentry/socket"
"gvisor.dev/gvisor/pkg/sentry/socket/netfilter"
epb "gvisor.dev/gvisor/pkg/sentry/socket/netstack/events_go_proto"
"gvisor.dev/gvisor/pkg/sentry/vfs"
"gvisor.dev/gvisor/pkg/sync"
"gvisor.dev/gvisor/pkg/syserr"
@@ -794,7 +797,22 @@ func (s *sock) Bind(_ *kernel.Task, sockaddr []byte) *syserr.Error {
// Listen implements the linux syscall listen(2) for sockets backed by
// tcpip.Endpoint.
func (s *sock) Listen(_ *kernel.Task, backlog int) *syserr.Error {
return syserr.TranslateNetstackError(s.Endpoint.Listen(backlog))
if err := s.Endpoint.Listen(backlog); err != nil {
return syserr.TranslateNetstackError(err)
}
if !socket.IsTCP(s) {
return nil
}
// Emit SentryTCPListenEvent with the bound port for tcp sockets.
addr, err := s.Endpoint.GetLocalAddress()
if err != nil {
panic(fmt.Sprintf("GetLocalAddress failed for tcp socket: %s", err))
}
eventchannel.Emit(&epb.SentryTcpListenEvent{
Port: proto.Int32(int32(addr.Port)),
})
return nil
}
// blockingAccept implements a blocking version of accept(2), that is, if no