[PATCH iproute2 00/11] ss fixes from an OSS scan

[Stephen Hemminger <stephen@networkplumber.org>]

Fixes for the ss findings of scan iproute2-20261015-004, plus bugs
found while confirming them.

The biggest overall change is removing all the fallback /proc parsing.
Even the oldest supported LTS kernel now supports netlink for socket
diagnostics. Users building their own kernels with custom configs
without netlink socket diags will just see an error.

The other changes escape names chosen by whoever owns the socket,
bound state and type values from the kernel before indexing name
tables, and stop treating a netlink port id as the owner's pid.

The overall output format is unchanged. Replaying a TCPDIAG_FILE does show
more: the recorded IPv6 dump was skipped before, so those rows are new
and the address columns widen to fit them.

Stephen Hemminger (11):
  ss: fix double close on sock_diag send failure
  ss: drop /proc fallback for socket listing
  ss: escape names chosen by the socket owner
  ss: size the TCPDIAG_FILE buffer to the record
  ss: replay all dumps in TCPDIAG_FILE
  ss: bound state and type name lookups
  ss: fix rpcbind service cache
  ss: read socket SELinux context only for -z
  ss: check owner before naming a netlink socket
  ss: keep following events after ENOBUFS
  ss: report a failed SCTP or MPTCP dump

 lib/escape.c                  |   7 +-
 man/man8/ss.8                 |   3 +-
 misc/ss.c                     | 874 +++++++++-------------------------
 testsuite/tests/ss/ssfilter.t |  26 +-
 4 files changed, 239 insertions(+), 671 deletions(-)

-- 
2.53.0