LineageOS/android_packages_modules_Connectivity
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use netd socketDestroy for VPN in T-

Browse Source 
aosp/2490881 updated to use InetDiagMessage.destroyLiveTcpSocket for all
devices.
But it is possible that netd socketDestory is modified in T- devices.
So this CL revert changes to keep using netd socketDestroy in T-
devices.

Test: atest FrameworksNetTests
Bug: 284253763
Change-Id: I9b61f10e975d2e38e9829a8c01d3af706e2518ef
This commit is contained in:
Motomu Utsumi
2023-06-04 21:32:08 +09:00
parent 72fe588d45
commit 1d13726710
2 changed files with 32 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
service/src/com/android/server/ConnectivityService.java
View File

@@ -8614,10 +8614,18 @@ public class ConnectivityService extends IConnectivityManager.Stub
}
private void maybeCloseSockets(NetworkAgentInfo nai, Set<UidRange> ranges,
Set<Integer> exemptUids) {
UidRangeParcel[] uidRangeParcels, int[] exemptUids) {
if (nai.isVPN() && !nai.networkAgentConfig.allowBypass) {
try {
mDeps.destroyLiveTcpSockets(UidRange.toIntRanges(ranges), exemptUids);
if (mDeps.isAtLeastU()) {
final Set<Integer> exemptUidSet = new ArraySet<>();
for (final int uid: exemptUids) {
exemptUidSet.add(uid);
}
mDeps.destroyLiveTcpSockets(UidRange.toIntRanges(ranges), exemptUidSet);
} else {
mNetd.socketDestroy(uidRangeParcels, exemptUids);
}
} catch (Exception e) {
loge("Exception in socket destroy: ", e);
}
@@ -8625,16 +8633,16 @@ public class ConnectivityService extends IConnectivityManager.Stub
}
private void updateVpnUidRanges(boolean add, NetworkAgentInfo nai, Set<UidRange> uidRanges) {
final Set<Integer> exemptUids = new ArraySet<>();
int[] exemptUids = new int[2];
// TODO: Excluding VPN_UID is necessary in order to not to kill the TCP connection used
// by PPTP. Fix this by making Vpn set the owner UID to VPN_UID instead of system when
// starting a legacy VPN, and remove VPN_UID here. (b/176542831)
exemptUids.add(VPN_UID);
exemptUids.add(nai.networkCapabilities.getOwnerUid());
exemptUids[0] = VPN_UID;
exemptUids[1] = nai.networkCapabilities.getOwnerUid();
UidRangeParcel[] ranges = toUidRangeStableParcels(uidRanges);
// Close sockets before modifying uid ranges so that RST packets can reach to the server.
maybeCloseSockets(nai, uidRanges, exemptUids);
maybeCloseSockets(nai, uidRanges, ranges, exemptUids);
try {
if (add) {
mNetd.networkAddUidRangesParcel(new NativeUidRangeConfig(
@@ -8648,7 +8656,7 @@ public class ConnectivityService extends IConnectivityManager.Stub
" on netId " + nai.network.netId + ". " + e);
}
// Close sockets that established connection while requesting netd.
maybeCloseSockets(nai, uidRanges, exemptUids);
maybeCloseSockets(nai, uidRanges, ranges, exemptUids);
}
private boolean isProxySetOnAnyDefaultNetwork() {