FreeBSD 13 ya kusan ƙare tare da aiwatar da ɓarna na WireGuard tare da keta lasisi da lahani.

Daga tushen lambar da aka kirkiri sakin FreeBSD 13, lambar da ke aiwatar da ka'idar WireGuard VPN, wanda aka haɓaka ta hanyar odar Netgate ba tare da tuntuɓar masu haɓaka WireGuard na asali ba, kuma an riga an haɗa su a cikin tsayayyen sakin pfSense rarraba. cire. Bayan bitar lambar ta Jason A. Donenfeld, marubucin WireGuard na asali, ya nuna cewa shirin FreeBSD na aiwatar da WireGuard wani yanki ne na lambar shoddy, mai cike da ambaliya da kuma keta GPL.

Aiwatar da aiwatarwa ya ƙunshi ɓarna masu ɓarna a cikin lambar sirri, an cire wani ɓangare na yarjejeniyar WireGuard, akwai kurakurai waɗanda suka haifar da faɗuwar kwaya da ketare hanyoyin tsaro, kuma an yi amfani da ƙayyadaddun buffer don shigar da bayanan. Kasancewar stubs maimakon cak wanda ko da yaushe ya dawo "gaskiya", da kuma manta da bugu na gyaran fuska tare da fitarwa na sigogi da aka yi amfani da su don ɓoyewa, da kuma yin amfani da aikin barci don hana yanayin tseren ya ce da yawa game da ingancin lambar.

Wasu sassa na lambar, kamar aikin crypto_xor, an aika su daga aiwatar da WireGuard da aka haɓaka don Linux, wanda ya saba wa lasisin GPL. A sakamakon haka, Jason Donenfield, tare da Kyle Evans da Matt Dunwoodie (marubuci na WireGuard tashar jiragen ruwa na OpenBSD), sun ɗauki aikin sake aiwatar da aiwatar da matsala kuma, a cikin mako guda, gaba ɗaya sun maye gurbin duk lambar mai haɓakawa da Netgate ya ɗauka. . An fitar da sigar da aka gyara azaman saitin faci na daban, wanda aka sanya shi a cikin ma'ajin aikin WireGuard kuma har yanzu ba a saka shi cikin FreeBSD ba.

Abin sha'awa, da farko babu alamun matsala; Netgate, wanda ke son samun damar yin amfani da WireGuard a cikin rarraba pfSense, ya hayar Matthew Macy, wanda ya kware sosai a cikin FreeBSD kernel da tari na cibiyar sadarwa, yana shiga cikin gyare-gyaren kwaro kuma yana da ƙwarewar haɓakawa. direbobin hanyar sadarwa na wannan tsarin aiki. An bai wa Macy jadawali mai sassauƙa ba tare da ƙayyadaddun ƙayyadaddun ƙayyadaddun ƙayyadaddun lokaci ko duban tsakiyar wa'adi ba. Masu haɓakawa waɗanda suka sadu da Macy yayin da suke aiki akan FreeBSD sun bayyana shi a matsayin ƙwararren ƙwararren mai tsara shirye-shirye wanda bai yi kuskure fiye da sauran ba kuma ya amsa daidai ga zargi. Rashin ingancin lambar aiwatar da WireGuard na FreeBSD ya zo musu da mamaki.

Bayan watanni 9 na aiki, Macy ya kara da aiwatar da shi zuwa reshen HEAD, wanda aka yi amfani da shi don samar da FreeBSD 13 saki, a watan Disambar da ya wuce ba tare da kammala nazari da gwadawa ba. An yi ci gaban ba tare da sadarwa tare da masu haɓaka WireGuard na asali da kuma OpenBSD da NetBSD tashar jiragen ruwa. A cikin Fabrairu, Netgate ya haɗa WireGuard zuwa cikin kwanciyar hankali na pfSense 2.5.0 kuma ya fara jigilar kayan wuta dangane da shi. Bayan an gano matsalolin, an cire lambar WireGuard daga pfSense.

Lambar da aka ƙara ta bayyana munanan raunin da aka yi amfani da ita a cikin kwanaki 0, amma da farko Netgate bai yarda da wanzuwar lahani ba kuma ya yi ƙoƙari ya zargi mai haɓaka WireGuard na asali na hare-hare da son zuciya, wanda ya yi mummunar tasiri ga sunansa. Mai haɓaka tashar tashar jiragen ruwa da farko ya ƙi iƙirarin game da ingancin lambar kuma ya ɗauke su da ƙari, amma bayan nuna kurakurai, ya ja hankali ga gaskiyar cewa babbar matsala ita ce rashin ingantaccen bita na ingancin lambar a cikin FreeBSD, saboda matsalolin sun kasance ba a gano su ba tsawon watanni da yawa. (Wakilan Netgate sun nuna cewa jama'a an ƙaddamar da bitar a cikin watan Agusta 2020, amma ɗayan masu haɓaka FreeBSD sun lura cewa a cikin Phabricator Macy ya rufe bitar ba tare da kammalawa ba tare da yin watsi da sharhi). Ƙungiyar FreeBSD Core ta mayar da martani ga lamarin ta hanyar yin alƙawarin sabunta hanyoyin nazarin lambobin su.

Matthew Macy, mai haɓaka tashar tashar FreeBSD mai matsala, yayi tsokaci game da lamarin inda ya ce ya yi babban kuskure ta hanyar ɗaukar aikin ba tare da shirye-shiryen aiwatar da aikin ba. Macy yayi bayanin sakamakon sakamakon ta hanyar ƙonawa da kuma sakamakon matsalolin da suka taso saboda ciwon bayan-Covid. Haka kuma, Macy bai sami ƙudirin yin watsi da wajibcin da ya riga ya ɗauka ba kuma ya yi ƙoƙarin kawo ƙarshen aikin.

Haka kuma yanayin Macy yana iya shafan hukuncin gidan yari na baya-bayan nan da aka yanke masa saboda yunkurin korar masu haya daga gidan da ya saya ba bisa ka'ida ba. A maimakon haka, shi da matarsa ​​suka sare katakon benen, suka fasa ramuka a cikin benaye, suka sa gidan ya zama ba kowa, sannan kuma ya yi kokarin tsoratar da mazauna garin, suka shiga gidajen da suka mamaye, suka kwashe kayansu (an dauki matakin a matsayin fashi). Don kaucewa alhakin abin da ya aikata, Macy da matarsa ​​sun gudu zuwa Italiya, amma an mika su zuwa Amurka kuma sun shafe fiye da shekaru hudu a gidan yari.

source: budenet.ru

Add a comment