ouroboros/src/lib/ssm, branch be

lib: Reclaim aged leaked ssm pool blocks

2026-06-03T06:02:34+00:00

The reclaim_pid_from_sc() function reaped any block allocated with refcount from a dead PID, but cross-process hand-offs can leave a block briefly allocated by the producer while a live consumer still holds it. This skips reclaim within SSM_POOL_RECLAIM_AGE_S (default 60s) so in-flight hand-offs survive a producer crash. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

lib: Fix overflow in ssm_flow_set_notify

2026-06-03T06:02:34+00:00

ssm_flow_set_notify wrote past the fqueue because of a missing bound check, corrupting adjacent memory under burst. Drop redundant FLOW_PKT when full and reserve the last slot for control events so they aren't starved by data-plane traffic. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

lib: Use push/pop for ssm_pk_buff ops

2026-05-20T06:17:06+00:00

Renames the allocation for head/tail to push/pop instead of alloc/release as it's simpler and shorter. Took this approach insted of adopting the kernel's push/pull/put/trim. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

build: Remove deprecated cmake options

2026-05-20T06:17:06+00:00

RXM_BUFFER_ON_HEAP and SSM_POOL_BLOCKS were no longer used. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

lib: Use const for ssm_pk_buff getters

2026-05-20T06:17:06+00:00

Mark ssm_pk_buff_get_off, _head, _tail, and _len as taking a const struct ssm_pk_buff *. Cast through the flex array in _head and _tail since the buffer view they return remains mutable. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

lib: Rename PROG_* config to PROC_*

2026-05-20T06:17:06+00:00

Per-process flow / fd / fqueue limits are properties of a process, not a program; align the naming. Mechanical rename of PROG_MAX_FLOWS, PROG_RES_FDS, and PROG_MAX_FQUEUES to PROC_*. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

include: Centralise atomic helpers in atomics.h

2026-05-20T06:17:05+00:00

Moves the atomics macros that were defined between eth and ssm_pool to their own header. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

lib: Fix pool_sharding_test

2026-05-20T06:17:05+00:00

The test was not correctly taking the correct size class. Moved the select_size_class to the common header so tests can use it. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

lib: Drain rbuff before close

2026-05-20T06:17:04+00:00

ssm_rbuff_close used to unmap the SHM page immediately, leaving any in-flight peer-process thread that was inside pthread_mutex_lock or pthread_cond_wait on the SHM-resident sync primitives reading freed memory. Adds an n_users counter, bumped on entry and dropped on exit of every function that touches the mutex / cond vars (write, write_b, read, read_b, fini), and have ssm_rbuff_close poll-spin until the counter drains before tearing down. ssm_rbuff_read now re-checks IS_EMPTY after taking the mutex, plugging a TOCTOU where two readers could both pass a lock-free fast path and the loser would read a stale TAIL. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

lib: Rename ssm_pk_buff_get_idx to ssm_pk_buff_get_off

2026-05-06T07:06:04+00:00

The shared memory pool is now offset based instead of block index-based like the old shm_rdrbuff allocator. This renames the API more consistently. Also changes variables names to off instead of idx for consistency. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders