Skip to content

v0.1.1: netlink sockets are named, not a coverage gap

Choose a tag to compare

View all tags
@YusefSyed YusefSyed released this 31 Oct 19:37
· 7 commits to main since this release
v0.1.1
4ca050e

Bug fix release.

  • Fixed: glibc's getaddrinfo opens socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) to list interfaces. v0.1.0 treated every SOCK_RAW socket as a raw-socket coverage.gap, so any traced program that resolved a hostname through glibc ended with coverage partial and verifier exit 3. Such sockets are now socket.netlink events named by protocol family (route), with detail.protocol; netlink addresses render as netlink instead of af16. Raw and packet sockets are still gaps. Integration test added.
  • Added: an animated terminal demo in the README, recorded from a real run in an arm64 Debian container, with the exact transcript in assets/demo-transcript.txt.
  • Added: SECURITY.md with private vulnerability reporting.
  • Docs: CI sentence brought up to date (the workflow runs on GitHub's ubuntu-24.04 runners); the eBPF roadmap entry points at the m3-ebpf branch; changelog section.

Install: cargo install --git https://github.com/YusefSyed/effect-tracer --tag v0.1.1 --locked

Assets 2
Loading