Sessions running as the main process in a container no longer get wrongly matched to peer connections.
What's wrong with this entry?
Ancestor verification for peer connections no longer treats a container init process as a legitimate ancestor, so a session running under PID 1 cannot be matched by accident.
- the Linux /proc ancestor walk now records a parent pid of 1 and stops there, where it previously discarded it by breaking at
ppid <= 1 - the array descendant helper returns false immediately for pid 1 (
if (t === 1) return !1) - the cached lookup now requires
process.pid !== 1 && i.includes(process.pid) - gated by platform: the ancestor walk reads /proc, so this is the Linux path
[peer-cred] peer pid lookup failed
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.234
Messages injected by a host are classified separately from peer messages
Both mention cross
-
v2.1.234
Cross-session control requests check ids more carefully
Both mention cross
-
v2.1.234
Notice acks now wait for the record to persist
Both mention cross