linux/meta-virtualization.git/recipes-networking, branch container-cross-install

cni: regenerate go-mod/shallow/hybrid

2026-01-04T16:47:30+00:00

There were some issues with hyrid vcs mode and shallow clones. The tools have been updated to deal with those issues, so we regenerate to pick them up. Signed-off-by: Bruce Ashfield

cni: update to v1.3.0

2025-12-09T01:57:44+00:00

Signed-off-by: Bruce Ashfield

cni: update to go-mod-vcs format

2025-12-09T01:57:44+00:00

Signed-off-by: Bruce Ashfield

openvswitch: small ptest fix adapt to UNPACKDIR changes

2025-07-21T02:36:08+00:00

Assume the build conf dir is /mnt/test/build_auh before UNPACKDIR change: S="/mnt/test/build_auh/tmp/work/qemuarm64-poky-linux/openvswitch/3.5.0/git" after UNPACKDIR change: S="/mnt/test/build_auh/tmp/work/qemuarm64-poky-linux/openvswitch/3.5.0/sources/openvswitch-3.5.0" Then we should change ptest patch to adapt to it Signed-off-by: Liu Yiding Signed-off-by: Bruce Ashfield

networking: adapt to UNPACKDIR changes

2025-06-26T02:57:46+00:00

This commit updates the container recipes to the OE core UNPACKDIR changes. - We drop references to WORKDIR - Drop S = assignemnts where possible Also note: openvswitch ptest is disabled as something in the source handling changes have broken it's install. We'll revisit this later. Signed-off-by: Bruce Ashfield

cni: make ca-certificates a packageconfig

2025-06-05T02:33:25+00:00

Moving ca-certificates into a packageconfig allows using cni without installing all the certificates. Signed-off-by: Patrick Vogelaar Signed-off-by: Bruce Ashfield

metadata: relocation.inc: add whitespace around assignments

2025-04-03T17:56:53+00:00

With: https://lists.openembedded.org/g/bitbake-devel/message/17508 there are many WARNINGs from this layer Signed-off-by: Martin Jansa Signed-off-by: Bruce Ashfield

metadata: src_uri.inc: add whitespace around assignments

2025-04-03T17:56:53+00:00

With: https://lists.openembedded.org/g/bitbake-devel/message/17508 there are many WARNINGs from this layer Signed-off-by: Martin Jansa Signed-off-by: Bruce Ashfield

passt: update to 2025_03_20.32f6212

2025-03-24T18:42:34+00:00

Bumping passt to version 2025_03_20.32f6212-11-gcf4d3f0, which comprises the following commits: cf4d3f0 packet: Upgrade severity of most packet errors 0857515 packet: ASSERT on signs of pool corruption 9153aca util: Add abort_with_msg() and ASSERT_WITH_MSG() helpers 38bcce9 packet: Rework packet_get() versus packet_get_try() 961aa6a packet: Move checks against PACKET_MAX_LEN to packet_check_range() 37d9f37 packet: Avoid integer overflows in packet_get_do() c48331c packet: Correct type of PACKET_MAX_LEN 9866d14 tap: Clarify calculation of TAP_MSGS a41d6d1 tap: Make size of pool_tap[46] purely a tuning parameter e43e007 packet: More cautious checks to avoid pointer arithmetic UB 4592719 vu_common: Tighten vu_packet_check_range() 32f6212 Makefile: Enable -Wformat-security 07c2d58 conf: Include libgen.h for basename(), fix build against musl ebdd463 tcp: Flush socket before checking for more data in active close state c250ffc migrate: Bump migration version number cfb3740 migrate, tcp: Migrate RFC 7323 timestamp 28772ee migrate, tcp: More careful marshalling of mss parameter during migration 51f3c07 passt-repair: Fix build with -Werror=format-security cb5b593 tcp, flow: Better use flow specific logging heleprs 96fe554 conf: Unify several paths in conf_ports() 78f1f0f test/perf: Simplify iperf3 server lifetime management 26df8a3 conf: Limit maximum MTU based on backend frame size 9d1a6b3 pcap: Correctly set snaplen based on tap backend type b6945e0 Simplify sizing of pkt_buf c4bfa33 tap: Use explicit defines for maximum length of L2 frame 1eda8de packet: Remove redundant TAP_BUF_BYTES define c43972a packet: Give explicit name to maximum packet size 74cd82a conf: Detect vhost-user mode earlier 4b17d04 conf: Move mode detection into helper function bb00a04 conf: Use the same optstring for passt and pasta modes c8b520c flow, repair: Wait for a short while for passt-repair to connect 0470170 passt-repair: Add directory watch 2b58b22 cppcheck: Add suppressions for "logically" exported functions a83c806 vhost_user: Don't export several functions 27395e6 tcp: Don't export tcp_update_csum() 12d5b36 checksum: Don't export various functions e36c35c log: Don't export passt_vsyslog() 57d2db3 treewide: Mark assorted functions static 68b0418 udp: create and send ICMPv6 to local peer when applicable 87e6a46 tap: break out building of udp header from tap_udp6_send function 55431f0 udp: create and send ICMPv4 to local peer when applicable 82a839b tap: break out building of udp header from tap_udp4_send function 1924e25 conf: Be more precise about minimum MTUs 672d786 tcp: Send RST in response to guest packets that match no connection 1f23681 tap: Consider IPv6 flow label when building packet sequences 0081756 ip: Helpers to access IPv6 flow label 52419a6 migrate, tcp: Don't flow_alloc_cancel() during incoming migration b270821 tcp: Unconditionally move to CLOSED state on tcp_rst() 56ce03e tcp: Correct error code handling from tcp_flow_repair_socket() 39f85bc migrate, flow: Don't attempt to migrate TCP flows without passt-repair 7b92f2e migrate, flow: Trivially succeed if migrating with no flows 8747173 selinux: Fixes/workarounds for passt and passt-repair, mostly for libvirt usage be86232 seccomp.sh: Silence stty errors ea69ca6 tap: always set the no_frag flag in IPv4 headers 4dac235 contrib/fedora: Actually install passt-repair SELinux policy file 16553c8 dhcp: Add option code byte in calculation for OPT_MAX boundary check 183bedf Makefile: Use mmap2() as alternative for mmap() in valgrind extra syscalls 1cc5d4c conf: Use 0 instead of -1 as "unassigned" mtu value 3dc7da6 conf: More thorough error checking when parsing --mtu option 65e317a flow: Clean up and generalise flow traversal macros b79a22d flow: Remove unneeded bound parameter from flow traversal macros 7ffca35 flow: Remove unneeded index from foreach_* macros adb46c1 flow: Add flow_perror() helper ba0823f tcp: Don't pass both flow pointer and flow index 854bc7b tcp: Remove spurious prototype for tcp_flow_migrate_shrink_window e56c803 tcp: More type safety for tcp_flow_migrate_target_ext() 5a07eb3 tcp_vu: head_cnt need not be global 6b40651 tap: Remove unused ETH_HDR_INIT() macro 354bc0b packet: Don't pass start and offset separately to packet_check_range() 0a51060 packet: Use flexible array member in struct pool bcc4908 dhcp: Remove option 255 length byte a1e48a0 test: Add migration tests 89ecf2f migrate: Migrate TCP flows 3e903bb repair, passt-repair: Build and warning fixes for musl 01b6a16 tcp_splice: A typo three years ago and SO_RCVLOWAT is gone 667caa0 tcp_splice: Don't wake up on input data if we can't write it anywhere 7c33b12 vhost_user: Clear ring address on GET_VRING_BASE 71249ef tcp, tcp_splice: Don't set SO_SNDBUF and SO_RCVBUF to maximum values 30f1e08 tcp: Keep updating window and checking for socket data after FIN from guest 98d474c contrib/selinux: Enable mapping guest memory for libvirt guests 9a84df4 selinux: Add rules needed to run tests a301158 rampstream: Add utility to test for corruption of data streams 6f122f0 tcp: Get bound address for connected inbound sockets too f3fe795 vhost_user: Make source quit after reporting migration state b899141 Add interfaces and configuration bits for passt-repair 155cd0c migrate: Migrate guest observed addresses 5911e08 migrate: Skeleton of live migration logic 836fe21 passt-repair: Fix off-by-one in check for number of file descriptors def7de4 tcp_vu: Fix off-by one in header count array adjustment 90f91fe tcp: Implement conservative zero-window probe on ACK timeout 472e2e9 tcp: Don't discard window information on keep-alive segments 31e8109 dhcp, dhcpv6: Add hostname and client fqdn ops a3d142a conf: Don't map DNS traffic to host, if host gateway is a resolver 864be47 passt-repair: Send one confirmation *per command*, not *per socket* fe8b6a7 dhcp: Don't re-use request message for reply b7b70ba passt-repair: Dodge "structurally unreachable code" warning from Coverity 0f009ea passt-repair: Fix calculation of payload length from cmsg_len a0b7f56 passt-repair: Don't use perror(), accept ECONNRESET as termination a5cca99 conf, passt.1: Un-deprecate --host-lo-to-ns-lo 0da87b3 debug: Add tcpdump to mbuto.img f66769c apparmor: Workaround for unconfined libvirtd when triggered by unprivileged user 593be32 passt-repair.1: Fix indication of TCP_REPAIR constants 9215f68 passt-repair: Build fixes for musl a9d63f9 passt-repair: use _exit() over return d0006fa treewide: use _exit() over exit() 745c163 tcp: Simplify handling of getsockname() b4a7b5d migrate: Fix several errors with passt-repair dcf014b doc: Add mock of migration source and target 52e57f9 tcp: Get socket port and address using getsockname() when connecting from guest 8c24301 Introduce passt-repair e894d9a vhost_user: Turn some vhost-user message reports to trace() e25a930 util: Add read_remainder() and read_all_buf() 71fa736 tcp_splice, udp_flow: fcntl64() support on PPC64 depends on glibc version b75ad15 vhost_user: On 32-bit ARM, mmap() is not available, mmap2() is used instead 722d347 tcp: Don't reset outbound connection on SYN retries bf28608 pasta.te: fix demo.sh and remove one duplicate rule dcd6d81 tcp: Add HOSTSIDE(x), HOSTFLOW(x) macros 0349cf6 util: Rename and make global vu_remove_watch() 10c4a9e tcp: Always pass NULL event with EPOLL_CTL_DEL dd6a685 vhost-user: Implement an empty VHOST_USER_SEND_RARP command d477a1f netlink: Skip loopback interface while looking for a template 4f2c8e7 vhost_user: Drop packet with unsupported iovec array ec5c4d9 tcp: Set PSH flag for last incoming packets in a batch db2c91a tcp: Set ACK flag on *all* RST segments, even for client in SYN-SENT state 54bb972 tcp: Disable Nagle's algorithm (set TCP_NODELAY) on all sockets 8757834 tcp: Buffer sizes are *not* inherited on accept()/accept4() c96a88d vhost_user: remove ASSERT() on iovec number 412ed4f vhost-user: Report to front-end we support VHOST_USER_PROTOCOL_F_DEVICE_STATE 31d7002 vhost-user: add VHOST_USER_SET_DEVICE_STATE_FD command 878e163 vhost-user: add VHOST_USER_CHECK_DEVICE_STATE command 78c73e9 vhost-user: Report to front-end we support VHOST_USER_PROTOCOL_F_LOG_SHMFD 3c1d91b vhost-user: add VHOST_USER_SET_LOG_BASE command 538312a vhost-user: Pass vu_dev to more virtio functions b04195c vhost-user: add VHOST_USER_SET_LOG_FD command 6016e04 vhost-user: update protocol features and commands list a8f4fc4 tcp: Mask EPOLLIN altogether if we're blocked waiting on an ACK from the guest b8f573c tcp: Set EPOLLET when when reading from a socket fails with EAGAIN 22cf08b tcp: Don't subscribe to EPOLLOUT events on STALLED 707f77b tcp: Fix ACK sequence getting out of sync on EPOLLOUT wake-up 1b95bd6 vhost_user: fix multibuffer from linux Signed-off-by: Bruce Ashfield

openvswitch: update to v3.5.0

2025-03-24T18:42:34+00:00

Bumping ovs to version v3.5.0-8-g445594155, which comprises the following commits: 445594155 ofproto-dpif: Fix dp_hash mapping after select group modification. 2d05966ba tests: Disable rate limiting for tests parsing flow dumps from logs. 59a155c93 tests: Fix 'ICMP related with SNAT' test case in offload scenario. d7536101f github: Get sparse from the official GitHub mirror. 0aa6a73d3 python: ovsdb-idl: Fix persist_uuid references. b11084dc7 python: ovsdb-idl: Handle inserts w/o changes. 490d0377d ofproto-dpif-xlate: Fix source IP lookup for non-bridge ports. 8a1fb4bcf Prepare for 3.5.1. 400db9746 Set release date for 3.5.0. 8d2a5f62a tests: Use correct arguments to curl. 6740a5230 dpif-netdev: Fix Auto Load Balance debug log. 196145a4a miniflow_extract: Push ct_tp_{src, dst} for later frags. d087675ba dpif-netdev: Preserve inner offloads on recirculation. cae90a3d7 ovsdb-server: Do not use filename after free. 3392e4375 netdev-vport: Ignore ipsec_ tunnel option prefix for all tunnels. 54c3a78ef ofproto-dpif-xlate: Fix memory leak in xlate_generic_encap_action(). 8ceccbb40 github: Update fedora image to 41. eab4db54a documentation: Fix Sphinx program directive. 1ccfc9882 documentation: Fix ovs-flowviz warnings on older Sphinx. 63785d16d fedora: Don't generate network-scripts-openvswitch for ver > 40. 57c3cc37c route-table: Allow parsing routes without nexthop. 123798f7f sparse: Remove wrappers for some DPDK headers. 472143855 netdev-offload-tc: Fix ignore of dl type mask when installing flows. 0aaa85240 faq: Update DPDK releases for older branches. 09095c698 AUTHORS: Add Markus Linnala. cb7a44690 utilities/bashcomp: Do not run ovs-vsctl when not possible. c0c61e12f ofproto-macros.at: Fix hex matching in the strip_recird() macro. 84768a4b0 route-table: Use ofpbuf_use_const() for multipath attributes. 6e708a043 route-table: Fix potential memory leak. ee9b72178 route-table: Avoid potential NULL ptr dereference. 09f3b32a3 ofp-ct: Add missing struct declaration. 005e25892 Prepare for 3.5.0. 2276c3a2c userspace: Support GRE TSO. d68b73e2f docs: Update userspace TSO tunnel fallback documentation. a4efa0788 docs: Add tunnel support to TSO GRE documentation. 91fc51106 route-table: Support parsing multipath routes. 50f7d2082 route-table: Export route table sync functions. da58f0291 route-table: Use correct type for nlmsg_type. 18aa16831 route-table: Rename route_data mark to rta_mark. ca8f5af37 route-table: Rename route_data local to rtn_local. a75eb5464 route-table: Store original value for rtm_dst_len. e573adeec route-table: Use callback for handling route msgs. e15910ddc route-table: Use RTA_TABLE for route table filter. 9d9a99d15 route-table: Support parsing RTA_VIA attribute. 6f9196a3d route-table: Store nexthops in linked list. 583dd0315 route-table: Harmonize log msgs with code base. 910bc81e6 route-table: Rename static nln callback buffer. 71785737d route-table: Split header and attribute parsing. 78d10bdc3 route-table: Store route protocol. 10ae7983e route-table: Store route priority. 903989bdb route-table: Store route table ID. e67f317ef ovs-ctl: Fix inability to set custom options for ovs-monitor-ipsec. fe1d48dba rhel, debian: Add missing restart policy to ipsec service. 656c95e13 rhel, debian: Fix systemd monitoring wrong pid for ovs-monitor-ipsec. 867093679 dpif-netdev: Modify code comments for function parse_tcp_flags. c3f4d9fe5 ipf: Fix the over-sized reassembly. 367e0fff2 debian: Let *-ctl handle runtime directory. 3f19558e7 debian: Use PIDFile with systemd. 439e0bf2f debian: Add X-Python3-Version stanza. 4ce47bbcc debian: Move ovs-flowviz to openvswitch-common. 96d5bcf99 debian: Drop hard Python dep where appropriate. f64e94d8d debian: Drop shlibs:Depends macro for -ipsec. 0ff25dfca debian: Drop python3:Depends macro for -vtep. 6a1a5f2ee python: Allow ovs-flowviz to run without graphviz. e4193663a debian: Use pybuild to handle OVS Python module. 8b7f1eb8d ovsdb: Fix asan warning on ovsdb fatal errors. a24413cd3 netdev-dpdk: Set vhost port maximum number of queue pairs. b72f6bb4c netdev-offload-dpdk: Fix spelling error in the comments. 260925314 dpdk: Update to use v24.11.1. e929e2c20 ipf: Cancel fragment pkt copy. 638433bb9 utilities: Add upcall statistics to the kernel_delay.py script. a48b3278f ipsec: Add support for using default crypto with Libreswan. 09d7c5ac0 ipsec: Add support for using non-root ipsec.conf. 1be33d52a netdev-tc-offloads: Don't offload header modification on ip fragments. 7b1ce8e2a ofpbuf: Add helper method to truncate the buffer. 4d09d6b48 stream-ssl: Add explicit support for configuring TLSv1.3. 0e23c9cab stream-ssl: Use DEFAULT:@SECLEVEL=2 cipher list by default. 57c235801 ovs-pki: Use 3072-bit keys by default and drop 1024-bit ones. 3131588e1 python: Require Python 3.7 for ssl.TLSVersion. e70670add m4: Fix check for Python 3.6 version. 2b9cc5f1c stream-ssl: Remove use of deprecated SSLv23_method. 57d58b799 stream-ssl: Support protocol ranges. 4b2016b82 stream-ssl: Drop support for OpenSSL 1.1.0 and older. 49f299313 treewide: Refer to SSL configuration as SSL/TLS. 923a80d1d stream-ssl: Deprecate and disable TLSv1 and TLSv1.1. 36645a62c AUTHORS: Add Allen Chen. af292d273 netdev-dpdk: Restore outer UDP checksum for Intel nics. 6f075ae4e netdev-offload-dpdk: Support ICMPv6 offload. b272282ab ofproto: Fix default pmd_id for ofproto/detrace. f62716992 ovsdb-data: Fix overflow in ovsdb_datum_sort_unique()'s return value. 69f1a128a ofp-meter: Initialize command with valid value. ccf083b55 general: Fix overflowed integer arguments. 7f6aa2e3d documentation: Fix ovs-flowviz highlight option. d104feb7f github: Skip clang-analyze when reference generation fails. 682a48908 cirrus: Update to FreeBSD 14.2 and 13.4. 9f0c46b5d bridge: Fix log spam about prefixes. 3b37a6154 netdev-vport: Deprecate STT tunnel port type. 8d7ac031c netdev-vport: Deprecate LISP tunnel port type. 77ac0b28c netdev: Always clear struct ifreq before ioctl. 40ba3fc93 netdev-native-tnl: Fix use of uninitialized RSS hash. 34868de01 tests: Use OVS_CHECK_XT6 for all applicable IPv6 tests. 2964cbbd4 tests: Use OVS_CHECK_XT for all applicable IPv4 tests. f0d1608a7 classifier: Fix the fieldspec comment in the prefix tracking section. 249a9b56e system-traffic: Fix syntax errors in FTP and IPv6 curl calls. e6844c646 ovsdb-idl: Fix use of uninitialized datum for graph consistency check. cd922bdd1 db-ctl-base: Fix uninitialized datum fields while checking conditions. a20e2c8ce ovsdb-types: Fix use of uninitialized reference type. 464bc6f9c ofproto-dpif-upcall: Fix use of uninitialized missed dumps counter. 308e56642 ovs-vsctl, vtep-ctl: Silence memory sanitizer warning for longindex. 303628e33 tests: multipath: Fix use of uninitialized wildcards. 54c4fd220 stream: replay: Fix potential NULL dereference on write failure. da12d3d9c ofp-actions: Fix use of uninitialized padding in set-field. 54ba1e272 system-traffic: Standardize by replacing all wget instances with curl. 6bafaebf3 system-traffic: Replace wget with curl for negative and ftp tests. 2af7cef26 ofproto: Enable address prefix tracking for IPv6 by default. 4394f7281 classifier: Increase the maximum number of prefixes (tries). 1ec2381d9 Revert "github: Skip FTP SNAT orig tuple tests due to broken Ubuntu kernel." 8433cea48 python: Use "if x not in" instead of "if not x in". ba5a1536c netdev-dpdk: Check error for device info and link status queries. 7383f0e1b netdev-dpdk: Cache representor flag at init. 6204d3837 netdev-dpdk: Cache device info during port configuration. d4b222bb6 netdev-dpdk: Stop configuring after device init failure. dc7663f13 tests: Fix transient failure in ping6 header modify. 05ba50324 github: Build Libreswan v5.1 from sources. ec2a950d7 tests: Handle marks using nft if available. 91ee06739 tests: Add nft support to ADD_EXTERNAL_CT. d595473cc tests: Add nft accept support. 764e020c1 AUTHORS: Add Mike Ovsiannikov. 9fa73098c ofproto/ofproto: Initialize learn add rule flag. 415628c41 ci: Update GitHub actions runner from Ubuntu 22.04 to 24.04. cb5aebd6d dpdk: Fix dpdk logs being split over multiple lines. e998d4558 ipsec: libreswan: Reduce chances for crossing streams. 91ef898ec tests: ipsec: Check that nodes can ping each other in the NxN test. 65f2e68c7 tests: ipsec: Add NxN + reconciliation test. 62167ff93 system-tests: Verbose cleanup of ports and namespaces. e2a7853ec ipsec: Make command timeout configurable. 91e6bc3f8 ipsec: libreswan: Avoid monitor hanging on stuck ipsec commands. f11fdde3c ipsec: libreswan: Try to bring non-active connections up. 25a301822 ipsec: libreswan: Reconcile missing connections periodically. c0368418d ipsec: libreswan: Fix regexp for connections waiting on child SA. 01b988ded ipsec: Add a helper function to run commands from the monitor. a119828ea meta-flow: Fix nw_frag mask while parsing from string. c30ff22b5 ci: Remove dependency on libpcap. 2d93dfd51 github: Remove ASLR entropy workaround. b3e08faf9 bond: Always revalidate unbalanced bonds when active member changes. 49a249fb2 ofproto-dpif-upcall: Fix redundant mirror on metadata modification. 06b8b9ecc system-offload: Add TC tunnel flags test case. 316fcc631 netdev-offload-tc: Add don't fragment support to encap action. aee4f9aec netdev-offload-tc: Match against tunnel flags if supported. 3f7af5233 netdev-offload-tc: Check if TCA_FLOWER_KEY_ENC_FLAGS is supported. 19ee88ef0 debian, rhel: Move ovs-flowviz and the man page to appropriate places. 4d1b1aa93 debian, rhel: Suggest ovs-flowviz dependencies. e26370889 python: Don't install ovs-flowviz.conf as a global data. 0256ee64e dpdk: Use DPDK 23.11.2 release. e532f937f documentation: Document ovs-flowviz. 4214bf4b2 python: ovs: flowviz: Add datapath graph format. f36b06510 python: ovs: flowviz: Add datapath html format. 60c3a4228 python: ovs: flowviz: Add Openflow cookie format. f4f8f650f python: ovs: flowviz: Add OpenFlow logical view. 1135fc321 python: ovs: flowviz: Add datapath tree format. 196b86eac python: ovs: flowviz: Add html formatting. d6fbc19e4 python: ovs: flowviz: Add default config file. ec2646dd4 python: ovs: flowviz: Add console formatting. e3149d480 python: ovs: flowviz: Add file processing infra. 2fb2dbe82 python: ovs: Add flowviz scheleton. 8bac5c0c7 python: ovs: flow: Add offloaded key to odp flow. c7e5cf39c python: ovs: flow: Support dp-extra-info section. 4c5c1aa9f conntrack: Fix Windows build due to ternary syntax extension. d1430f3d8 checkpatch: Fix checkpatch's check-authors-file option in CirrusCI. 54aa6e12a AUTHORS: Update Kevin Traynor. 63a4b4d0f dpctl: Do not allow out of range values in ct-set-limits. b57c1da5c conntrack: Use a per zone default limit. 41f3f5b90 conntrack: Turn zl local limit into atomic. 8ff40f335 conntrack: Do not use atomics to report zones info. 8ec7d55bf conntrack: Add zone limit coverage counter. db26ef7c0 conntrack: Correctly annotate conntrack member. a6ccd1115 checkpatch: Add new check-authors-file option to checkpatch.py. 58c66c190 selinux: Add missing permissions for netlink_rdma_socket. 445991838 ovs-macros.at: Correctly delete iptables rule on_exit. 60917c822 system-traffic: Do not rely on conncount for already tracked packets. cb6423478 ofproto-dpif: Improve load balancing in dp_hash select groups. 7df4dd2aa debian: Allow passing DEB_BUILD_OPTIONS. 84ea72fcc Revert "ci: Use sarif-tools v3.0.1 due to issues in earlier versions." f2ab45c66 ci: Use sarif-tools v3.0.1 due to issues in earlier versions. 8370cda58 AUTHORS: Add Sunyang Wu. 38a9482bc netdev-offload: Fix incorrect comments. 68517f43a tests: ovsdb: Add ovsdb prefix to related tests. f27a1a081 tests: ovsdb: Update missing ovsdb keywords. 2c7e2d58c selinux: Update policy file. e3ac1e5e7 AUTHORS: Add Jonathan Davies . e40f9312f github: Skip FTP SNAT orig tuple tests due to broken Ubuntu kernel. 5c42db83b ci: Run oss-fuzz build stage during CI. 2bf609f70 netdev-dpdk: Disable outer udp checksum offload for txgbe driver. 1b9964902 AUTHORS: Add Liu Yulong. 172a66580 netdev-offload-dpdk: Change flow offload failure log level. ec0f3772f utilities: Add a GDB macro to dump ct conns. fa731c112 oss-fuzz: Fix odp_flow_format() API in the fuzz tests. 234e62619 ci: Use previous sarif-tools release due to issue in latest release. c98759a4f ovsdb-idl: Fix IDL memory leak. ddd6490ab mcast-snooping: Don't access ovs_list members directly. 363435fe8 mcast-snooping: Properly check group_get_lru return code. d1332ee41 vconn: Always properly free flow stats reply. 3d6b048d8 classifier: Store n_indices between usage. cfc8321da netlink-socket: Initialize socket family. cfb0abb95 jsonrpc: Don't access ovs_list members directly. a67db28fd dpif-netdev: Remove undefined integer division. e48ba271f ovsdb-error: Annotate non-null functions. bd48ff8f7 netdev-dpdk: Re-enable VXLAN/Geneve offload for Intel cards. 82c1028e3 Userspace: Software fallback for UDP encapsulated TCP segmentation. 5cb19214e ofproto/bond: Preserve active bond member over restarts. 6c3074686 conntrack: Disambiguate the cleaned count log. 252ee0f18 dpif: Fix flow put debug message match content. 604e54fc3 ovs-dpctl-top: Fix RuntimeError with resizing flow dict during iteration. 0051785f0 ovs-dpctl-top: Fix Python3.12 invalid syntax warning. 70fd13e25 utilities: Updated dpif_nl_exec_monitor.py to debug all operations. bc9561c87 utilities: Update dpif_nl_exec_monitor.py to include new actions. 180ab2fd6 ofproto-dpif-upcall: Avoid stale ukeys leaks. c38ff60c2 odp-util: Fix dead code warning in format_odp_set_nsh(). edb66993f dpif-netdev-perf: Eliminate dead code. 941b1825b vlog: Only close() valid file descriptors. f5c4bdafe stopwatch: Handle spurious wakeups of ovs_mutex_cond_wait(). c90362488 dpif: Fix potential NULL pointer access in log_flow_message(). 4a9c06ba0 netdev-native-tnl: Fix Coverity integer overflows report. 01769004c hash: Fix integer overflow before widen in hash_finish32(). d7a9a9eb6 userspace: Correctly set ip offload flag in native tunneling. 963dec466 docs: Fix argument formatting in ovs-appctl(8) man page. 19d809afb AUTHORS: Update email for Rosemarie O'Riorden. dbeabcc68 Set release date for 3.4.0. f3197b73b releases: Mark 3.3 as a new LTS release. 2ff8ed8de dp-packet: Correct IPv4 checksum calculation. ea2bd0d6f netdev-linux: Fix unaligned access to rpl_rtnl_link_stats64. 8d3cd41c3 route-table: Fix another UBsan warning about pointer type. 4ba65112d netdev-linux: Do not offload IP checksum. 82ed9ef78 tunnel, tests: Add test for mirroring over tunnels. 70bc3baaa ofproto-dpif-xlate: Add a recursion limit to tunnel address lookup. 9f0c6e16e netdev-dpdk: Fix race condition in mempool information dump. a5023d597 ovsdb: transaction: Remove incorrect transaction abort in pre-commit. 8f3d6c145 netlink-notifier: Silence the UBsan's function pointer mismatch error. f12f4d890 Documentation: Update QEMU documentation URLs. cdba5e30e AUTHORS: Add Vipul Ashri. 53d9dcb9f match: Fix false-positive snprintf size warning. b516da14c util: Add non-NULL format assertion to xvasprintf. f9078407a ofproto-dpif-xlate: Initialize observe_offset for sample actions. ebdc3cf91 docs: Define Read the Docs configuration for Sphinx HTML parameters. f973d9543 ofproto-dpif-xlate: Remove misleading wc NULL check in packet mirror. d5fef714b flow: Fix unaligned access to the ND target in miniflow_extract. 6165c92a2 ofp-actions: Fix reporting observation point bits instead of domain. 03cd668e0 dpif-netlink-rtnl: Fix netdev leak in out-of-tree tunnels probe. 3985fa03b dpctl: Fix netdev reference leak in "show" command. 903aa8fdc Prepare for post-3.4.0 (3.4.90). Signed-off-by: Bruce Ashfield