mirror of
https://github.com/SagerNet/sing-box.git
synced 2026-06-12 21:00:40 +08:00
00a2704ecf
Three independent correctness bugs that all violated "decide before publishing": each surface (wire reply, sysfs path, broadcast state) committed to a state the code later had to contradict. darwin: switch IOUSBHostPipe abort to IOUSBHostAbortOptionSynchronous and add the EP-0 path via abortDeviceRequestsWithOption (previously a silent no-op for control transfers). After abort returns, await a per-pending drained channel before writing RET_UNLINK so the late RetSubmit suppression in finishSubmit has actually taken effect — the drained channel is allocated lazily by markSubmitUnlinked, so the hot submit path is unchanged. linux: collapse the per-controller VHCI abstraction. The kernel exposes attach/detach/status/status.N only on vhci_hcd.0 with globally unique port numbers; the previous code wrote vhci_hcd.N/attach for N>0 and silently failed past the primary controller's port range. Glob status* on the primary, key reservations on bare port int, and carry the status-suffix as a diagnostic-only secondary index for Description(). export_ledger: ConsumeLeaseAndReserve no longer publishes busy=true and then conditionally rolls it back. Read seq under fast first, then make every decision (including the lease.Generation check) inside one slow critical section before any busy mutation. This removes the window where a concurrent BroadcastIfChanged could observe transient busy and poison l.state with no corrective broadcast on rollback. |
||
|---|---|---|
| .. | ||
| acme | ||
| ccm | ||
| derp | ||
| ocm | ||
| oomkiller | ||
| origin_ca | ||
| resolved | ||
| ssmapi | ||
| usbip | ||