4db2957a498e1ced3c1794caf34f6d7d7fbe5624
P1: The IOUSBHostControllerInterface command/doorbell blocks ran on an Apple-owned dispatch queue, so callbacks could still fire (and panic in cgo.Handle.Value) after Close deleted the handle. The controller now owns a serial dispatch queue and drains it via dispatch_sync before tearing the wrapper down — the watcher's pattern, extracted into a shared box_usbhost_drain_and_release_queue helper. P2: scatterResponse only bounds-checked ActualLength on IN transfers, so an OUT RET_SUBMIT with a negative or oversized actual_length flowed straight to box_usbhost_endpoint_sm_complete as a wrapped C.size_t. Validation moves into pendingTransfer.accept, which reconciles every response against the request before the length leaves the package. Also wraps cgo.Handle in cgoCallbackHandle so destroy-then-Delete ordering is encoded structurally for both the watcher and the controller.
sing-box
The universal proxy platform.
Documentation
License
Copyright (C) 2022 by nekohasekai <contact-sagernet@sekai.icu>
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
In addition, no derivative work may use the name or imply association
with this application without prior consent.
Description
Languages
Go
97.2%
Shell
1.6%
Objective-C
0.8%
Makefile
0.2%
C
0.2%