fix(flow-entry): add an insertion that will not displace a live flow - #1736

Closed

daniel-noland wants to merge 33 commits into

pr/daniel-noland/fuzz-routingfrom

pr/daniel-noland/fuzz-flow-entry

Commits on Aug 21, 2026

build(nix): keep debug outputs lean

authored and
mvachhar
committed
5fbd671
feat(debug): add a version-matched core viewer

authored and
mvachhar
committed
2c9340d
feat(debug): add a live DAP debugger

authored and
mvachhar
committed
9817fc8
feat(debug): add a syscall tracer image

authored and
mvachhar
committed
e303595
ci: publish debug images on a deliberate cadence

authored and
mvachhar
committed
417a9ea
test(debug): exercise the debug images instead of only building them

authored and
mvachhar
committed
dd4e1d4
feat(debug): run a binary or a single test inside the debug images

authored and
mvachhar
committed
9f7481b
fix(net): Store the checksum an incremental update computes

authored and
mvachhar
committed
f97fb60
test(net): Check the HeadersView unsafe boundary against the safe matcher

authored and
mvachhar
committed
34e0b39
docs(net): Correct where the HeadersView soundness check actually fires

authored and
mvachhar
committed
f670d95
test(net): Check the mutable half of the HeadersView boundary, and make miri usable

authored and
mvachhar
committed
199c52b
test(net): Extend the HeadersView differential to every arity the oracle reaches

authored and
mvachhar
committed
697a0f8
test(net): Reach the quoted packet inside an ICMP error, and the extension region

authored and
mvachhar
committed
ddfc3e0
test(net): Cover the optional matchers, and find what their combinators watch

authored and
mvachhar
committed
2fa9b45
test(net): Make the shape follow the chain, and reach every arity's look

authored and
mvachhar
committed
05e4c5b
test(net): Stack the extension headers the builder always could

authored and
mvachhar
committed
22a947e
test(net): Specialize the ICMP subtypes, and find that conform is dead

authored and
mvachhar
committed
97e8d39
test(net): Keep the embedded vacuity guard armed under coverage

authored and
mvachhar
committed
332eaf2
test(routing): Property-test the rib-to-fib conversion

authored and
mvachhar
committed
d752ab1
fix(routing): Survive a resolution loop in the next-hop walks

authored and
mvachhar
committed
19b34b6
test(routing): Model-check a fib against its change log

authored and
mvachhar
committed
2e2d6b4
fix(routing): Drop a fib's vni alias when the fib goes

authored and
mvachhar
committed
49cf4fd
fix(routing): Refuse to remove the default vrf

authored and
mvachhar
committed
4f1aba0
fix(frrmi): Frame a message by what arrived, not by what was asked for

authored and
mvachhar
committed
55305b8
fix(routing): Install a route with no next-hops as a drop, in the rib

authored and
mvachhar
committed
8132aa7
test(routing): Cover the vrf deletion check

authored and
mvachhar
committed
1f6984e
test(routing): Property-test resolution across vrfs

authored and
mvachhar
committed
97ca801
fix(routing): Keep the interface name out of the next-hop key

authored and
mvachhar
committed
7d23fcf
test(routing): Property-test the control-plane operations

authored and
mvachhar
committed
8544210
test(routing): Property-test the FRR config renderers

authored and
mvachhar
committed
c04dec2
test(routing): Model-check the interface table and its attachments

authored and
mvachhar
committed
7dd61e7
test(routing): Property-test the adjacency table's publish discipline

authored and
mvachhar
committed
9df9cbe
fix(flow-entry): Add an insertion that will not displace a live flow

daniel-noland
authored and
mvachhar
committed
de3a6b8

Navigation Menu

Uh oh!

fix(flow-entry): add an insertion that will not displace a live flow - #1736

fix(flow-entry): add an insertion that will not displace a live flow#1736
daniel-noland wants to merge 33 commits into
pr/daniel-noland/fuzz-routingfrom
pr/daniel-noland/fuzz-flow-entry

Commits on Aug 21, 2026

build(nix): keep debug outputs lean

feat(debug): add a version-matched core viewer

feat(debug): add a live DAP debugger

feat(debug): add a syscall tracer image

ci: publish debug images on a deliberate cadence

test(debug): exercise the debug images instead of only building them

feat(debug): run a binary or a single test inside the debug images

fix(net): Store the checksum an incremental update computes

test(net): Check the HeadersView unsafe boundary against the safe matcher

docs(net): Correct where the HeadersView soundness check actually fires

test(net): Check the mutable half of the HeadersView boundary, and make miri usable

test(net): Extend the HeadersView differential to every arity the oracle reaches

test(net): Reach the quoted packet inside an ICMP error, and the extension region

test(net): Cover the optional matchers, and find what their combinators watch

test(net): Make the shape follow the chain, and reach every arity's look

test(net): Stack the extension headers the builder always could

test(net): Specialize the ICMP subtypes, and find that conform is dead

test(net): Keep the embedded vacuity guard armed under coverage

test(routing): Property-test the rib-to-fib conversion

fix(routing): Survive a resolution loop in the next-hop walks

test(routing): Model-check a fib against its change log

fix(routing): Drop a fib's vni alias when the fib goes

fix(routing): Refuse to remove the default vrf

fix(frrmi): Frame a message by what arrived, not by what was asked for

fix(routing): Install a route with no next-hops as a drop, in the rib

test(routing): Cover the vrf deletion check

test(routing): Property-test resolution across vrfs

fix(routing): Keep the interface name out of the next-hop key

test(routing): Property-test the control-plane operations

test(routing): Property-test the FRR config renderers

test(routing): Model-check the interface table and its attachments

test(routing): Property-test the adjacency table's publish discipline

fix(flow-entry): Add an insertion that will not displace a live flow