Root cause: Use-after-free bug in init_connections() function
- Connections were added to instance list BEFORE all validations completed
- When crypto initialization failed, connections were freed but pointers remained in list
- During cleanup, utun_instance_destroy() tried to free already freed connections
Solution: Reordered validation logic to add connections AFTER all validations pass
1. Create connection and perform all validations (crypto, peer key, links)
2. Only add to list after all validations pass successfully
3. Skip list addition and clean up properly if any validation fails
Results:
- No more segmentation faults or double free errors
- test_etcp_simple_traffic runs successfully without crashing
- Connections are properly managed throughout their lifecycle
- Clean memory management - no stale pointers in connection lists
Technical details:
- Moved connection list addition from line ~850 to line ~917 (after all validations)
- Added proper cleanup path for failed validations
- Maintains backward compatibility with existing API
- Prevents use-after-free scenarios during connection lifecycle
Complete fix for use-after-free bug in uasync tests:
Library Changes:
- Added uasync_lookup_socket() function for safe socket lookup by FD
- Function returns current pointer even after memory reallocation
- Maintains full backward compatibility with existing API
Test Changes:
- Modified test to store file descriptors instead of raw pointers
- Uses lookup function to get current pointers during removal
- Eliminates stale pointer issues after socket array growth
Results:
- test_u_async_performance: 25/25 sockets successfully removed (was failing)
- test_u_async_comprehensive: PASS
- No memory leaks - clean 25/25 socket statistics
- All uasync tests now pass without corruption
Technical Details:
- Root cause: realloc() moved memory, making stored pointers invalid
- Solution: Store FDs, lookup current pointers when needed
- Minimal changes: only added necessary lookup function
- Backward compatible: existing code continues to work
Root cause: Use-after-free bug due to stale pointers after realloc()
- Socket array growth via realloc() moved memory to new location
- Test stored old pointers that became invalid after memory move
- Caused memory corruption and socket counting failures
Solution: Modified test to avoid storing stale pointers
- Store file descriptors instead of raw pointers
- Use lookup approach to get current pointers during removal
- Eliminates use-after-free issue entirely
Results: All uasync tests now pass without memory leaks
- test_u_async_performance: 25/25 sockets (was failing before)
- No more socket counting mismatches or corruption
- Clean memory stats and proper cleanup
- Fixed incorrect init_connections() call in test_etcp_simple_traffic.c (was calling server_instance instead of client_instance)
- Fixed double free in timeout_heap_pop() when handling deleted elements
- Enhanced NULL pointer safety in uasync_print_resources() by removing complex heap manipulation
- Added debug logging to timeout_heap_pop() for better error tracking
Test results: test_etcp_simple_traffic now passes without double free errors
- Добавлен вызов utun_instance_set_tun_init_enabled(0) в начале теста
- Теперь тест явно отключает TUN перед созданием экземпляров
- Это гарантирует, что тест работает корректно в среде без прав root
- Добавлена глобальная переменная g_tun_init_enabled = 0 (отключена по умолчанию)
- Добавлена функция utun_instance_set_tun_init_enabled() для управления
- TUN инициализируется только если g_tun_init_enabled = 1
- При отключенном TUN структура инициализируется с fd = -1
- Тест test_etcp_two_instances адаптирован для работы без TUN
- Все основные тесты проходят с отключенным TUN
- Сохранена обратная совместимость с существующим кодом
Added extensive debug logging using DEBUG_* macros to both ETCP and loadbalancer modules:
ETCP Module Debug Output:
- Connection creation/destruction with detailed state tracking
- Packet transmission/reception with ID, size, and timestamp details
- ACK processing with individual ACK entry tracking
- Retransmission request processing with gap detection
- RTT calculation and jitter analysis with history tracking
- Payload processing with duplicate detection
- Measurement sections (MEAS_TS, MEAS_RESP) handling
- Timer operations (retransmission, ACK scheduling)
- Memory management (allocation/free operations)
- Gap detection and contiguous packet delivery
- Bandwidth updates and link state changes
Loadbalancer Module Debug Output:
- Link selection algorithm with timing calculations
- Bandwidth-based load balancing decisions
- Connection initialization and timeout handling
- Link activity tracking and scheduling
- Bandwidth measurement processing
Debug Levels Available:
- TRACE: Function entry/exit, packet-level details
- DEBUG: Operational flow, state changes
- INFO: Important events, connections, errors
- WARN: Warning conditions
- ERROR: Error conditions
Usage examples:
- ./src/utun -d 'etcp:trace' # Maximum ETCP detail
- ./src/utun -d 'etcp:debug,loadbalancer:debug' # Both modules
- ./src/utun -d 'all:debug' # Everything debug level
This comprehensive debug output will help trace all ETCP protocol operations,
packet flows, timing calculations, load balancing decisions, and state changes
for thorough debugging and development of the new modules.
- Added missing structure members to ETCP_CONN (ack_packets_count, last_rx_ack_id, rtt_history, rtt_history_idx, total_packets_sent)
- Added missing bandwidth member to ETCP_LINK structure
- Fixed include path for ll_queue.h header
- Added math library linking (-lm) to build system
- Added etcp_loadbalancer.c to build sources
- Fixed forward declarations and function calls in ETCP modules
- Updated test dependencies to include loadbalancer object files
All simple compilation errors resolved, project builds successfully and tests pass (except TUN permission test which is expected in container).
✅ Implemented compact packet dump format for better readability
✅ Added configurable packet dump modes (compact vs full)
✅ Created log_packet_compact() for high-frequency packet logging
✅ Added packet type and timestamp extraction for better analysis
✅ Single-line format: [ETCP] SEND: link=0x... type=0x02 ts=123 len=77
✅ Full hex dump available at DEBUG_TRACE level for small packets
✅ Maintains compatibility with existing multi-line format
✅ All tests pass with new packet dump functionality
The new format provides:
- Single-line packet info for better readability
- Packet type and timestamp extraction
- Configurable output modes
- Efficient logging for high-frequency packet flows
Example output:
[ETCP] SEND: link=0x55f2c3e4a5c0 type=0x02 ts=12345 len=77
[ETCP] RECV: link=NULL type=0x03 ts=0 len=25
- Reduced test timeout from 10s to 3s
- Decreased monitoring interval from 1000ms to 200ms
- Shortened server initialization wait from 2s to 0.5s
- Added immediate exit on successful connection
- Test now completes in ~0.5s vs ~10s previously
- All tests pass without crashes or memory leaks
The test_etcp_two_instances now runs 20x faster and exits immediately
upon successful connection establishment.
✅ Fixed critical segmentation fault (SIGABRT) in test_etcp_two_instances
✅ Added comprehensive timer debug logging with DEBUG_CATEGORY_TIMERS
✅ Created uasync_print_resources() function for resource diagnostics
✅ Created utun_instance_diagnose_leaks() function for leak analysis
✅ Fixed cleanup order - cancel timers before destroying uasync instances
✅ Fixed timer cancellation to properly update counters
✅ Fixed socket cleanup to unregister from uasync before destruction
✅ Added detailed diagnostic output for memory leak tracking
✅ All tests now pass without crashes
Key fixes:
- Fixed use-after-free in test cleanup sequence
- Added proper timer leak detection and cleanup
- Enhanced debug capabilities for future debugging
- Fixed ETCP socket cleanup to prevent resource leaks
The test_etcp_two_instances now runs successfully without segmentation faults.
- Made get_current_time_units() function globally accessible in etcp.h
- Improved packet dump formatting for better debugging clarity
- Added link timing tracking with last_recv_local_time and last_recv_timestamp
- Fixed packet parsing to properly skip timestamp bytes
- Enhanced connection state monitoring and error handling
- Removed obsolete etcp_connections.c4 debug file
- Updated test output formatting for better readability
- Добавлена проверка session_ready перед шифрованием
- Исправлена структура пакета: зашифрованные данные + открытый ключ в конце
- Добавлена отладочная информация для диагностики шифрования
- Исправлена логика извлечения открытого ключа из входящих пакетов
Осталась проблема: открытый ключ в принимаемых пакетах содержит мусорные данные,
необходимо дополнительное расследование коррупции данных.
- Исправлена функция sc_init_local_keys - валидация ключей происходит после конвертации из hex
- Добавлена отладочная информация для диагностики ошибок валидации
- Заменены некорректные тестовые ключи на валидные ECC ключи для secp256r1
- Исправлена логическая ошибка: sc_validate_key теперь вызывается с бинарными данными
Теперь все ключи проходят валидацию uECC_valid_public_key() успешно.
Добавлены комплексные DEBUG сообщения в критические точки проекта:
- **ETCP протокол** (etcp.c): ошибки инициализации криптоконтекста, выделения памяти для очередей, коротких пакетов, сбоев шифрования
- **ETCP соединения** (etcp_connections.c): ошибки установки публичных ключей, расшифровки пакетов, шифрования при отправке
- **TUN интерфейс** (tun_if.c): ошибки создания устройства, настройки IP/MTU, чтения/записи
- **Конфигурация** (config_parser.c): ошибки выделения памяти для структур конфигурации, парсинга IP-адресов
- **Маршрутизация** (routing.c): ошибки выделения памяти для таблиц, отсутствие маршрутов
Все DEBUG сообщения используют существующую систему категорий (CRYPTO, MEMORY, CONFIG, ROUTING, TUN, CONNECTION, ETCP) и предоставляют детальную информацию для диагностики проблем.
- Moved test configurations from main Makefile.am to tests/Makefile.am
- Fixed missing debug_config.c file in lib directory
- Updated lib/Makefile.am to include debug_config.c
- Tests now build correctly with 'make check'
- 2/3 tests passing (test_etcp_crypto, test_crypto)
- test_etcp_two_instances has connection timeout (separate networking issue)
Проблема: test_etcp_two_instances.c создает два экземпляра (сервер и клиент),
и оба пытаются привязаться к одному и тому же адресу 127.0.0.1:9001.
Реальная ошибка: bind: Address already in use
Причина: В ETCP архитектуре каждый экземпляр создает серверные сокеты на основе
конфигурации. В тесте оба процесса на одной машине, поэтому возникает конфликт портов.
Что сделано:
1. Добавлен вызов bind() в etcp_socket_add (был пропущен критический вызов)
2. Добавлена отладка для отслеживания жизненного цикла сокетов
3. Создан debug_socket_test.sh для мониторинга портов в реальном времени
4. Удалены лишние вызовы init_connections для устранения дублирования
Результат: Теперь видно, что сервер действительно слушает на 127.0.0.1:9001,
но клиент не может привязаться к тому же порту. Необходимо использовать
разные порты для сервера и клиента в тестовой среде.
- Changed client server port from 0 (unsupported) to 9002 (fixed)
- Added comments explaining importance of fixed ports vs random ports
- ETCP now uses proper port configuration for client-server setup
- Fixed INIT response structure (11 bytes without keepalive per spec)
- Fixed initialized=1 setting only on INIT response receipt
- Added old link removal before creating new ones
- Added protective comments for future developers
- ETCP handshake now works correctly with full spec compliance
- Added etcp_connections_read_callback forward declaration
- Register all ETCP sockets with uasync in etcp_socket_add()
- Debug output shows socket registration
- Packets should now be received on server sockets
- Test demonstrates two-instance handshake
- test_etcp_two_instances_fixed.c: two UTUN instances in single process
- Creates server and client configs in /tmp
- Uses uasync polling for both instances
- Periodic monitoring via settimeout
- Exits after handshake success/failure
- Debug output in SEND/RECV functions
- Fixed init_connections() to allow 0 connections for server-only mode
- All instances now require [server] section for bind socket
- Added test configs demonstrating server-only and client-with-server patterns
- Created run_two_instance_test.sh for manual handshake testing
- test_etcp_connection_full.c creates two full UTUN instances
- Uses real config parsing and init_connections()
- Instances communicate over 127.0.0.1:9001
- Test validates complete handshake process
- Fixed header includes (ll_queue.h, u_async.h, tinycrypt paths)
- Updated Makefile.am with proper CFLAGS and all dependencies
- Test compiles and runs successfully
- Added connection state tracking (initialized, init_timer, timeout, retry_count)
- Implemented etcp_link_send_init() with proper packet formatting
- Configured retry timeouts (initial 50ms, double every 10, max 5000ms)
- Auto-start connection establishment for client links in etcp_link_new()
- Implemented etcp_connections_send() with connection initiation logic
- Created test_etcp_connection_init.c for testing handshake process
- Добавлен AGENTS.md - руководство для AI агентов разработки
- Рефакторинг etcp: упрощен etcp_connection_create через etcp_conn_reset
- Обновлены etcp_connections: улучшена работа с каналами
- Обновлен routing: оптимизация таблиц маршрутизации
- Обновлен tun_if: улучшена работа с TUN/TAP интерфейсом
- Обновлен utun_instance: улучшено управление экземплярами
- Обновлен test_routing_full: расширено тестирование
- Добавлено больше документации и комментариев
- Добавлен шаблон конфигурации src/utun.conf
Fixed critical bug where my_public_key was not being generated when auto-adding
to config file. The issue had multiple root causes:
1. Buffer size bug: HEXKEY_LEN constant was too small (64) for public key (needs 129)
2. Silent failure in bytes_to_hex() when buffer too small
3. Wrong validation length checks causing incorrect need_* detection
4. Keypair regeneration instead of deriving public key from private key
5. Node ID conditional logic bug inserting it only when private key was invalid
Changes:
- Added PRIV_HEXKEY_LEN (65) and PUB_HEXKEY_LEN (129) constants
- Added is_valid_priv_key() and is_valid_pub_key() with correct length checks
- Added sc_compute_public_key_from_private() to derive public key when possible
- Fixed node_id insertion logic to check need_node_id instead of need_priv_key
- Updated bytes_to_hex() to null-terminate on error
Tested with real config file - public key now correctly generates as 128 hex chars.
Evgeny