Merge upstream main into seera-main

[masa-koz]

Description

Merge main (tracking upstream microsoft/msquic) into seera-main. 25 upstream commits since the last sync at c2271990.

Notable ones for the fork:

Upstream	What it changes
microsoft#6217	Path migration UAF — guards path promotion with an InUse check
microsoft#6213	Clamps the advertised MaxAckDelay to MinAckDelay
microsoft#6047	Discards client Initial keys when Handshake write keys are installed; adds QUIC_PACKET_BUILDER::InitialKeysDiscarded so a flush that frees allowance reschedules
microsoft#6167	Validates the Version Negotiation packet's Source CID against our Destination CID
microsoft#6181	Handles zero-length datagrams in epoll and io_uring
microsoft#6198	Upgrades the XDP dependency to v1.4
microsoft#6199	Removes the obsolete Linux raw datapath (datapath_raw_linux.c, datapath_raw_socket_linux.c) and their clog artifacts
microsoft#6155	Shifts Linux OpenSSL CI to Ubuntu 26.04, and adds NOLINTNEXTLINE clang-tidy suppressions across core

Submodules move with it: googletest fa005b2→c0afb7f, openssl 1d6826b→3d9ddf4, xdp-for-windows to v1.4.

Conflicts

Four, all resolved keeping the fork's behaviour and taking upstream's change where the two were independent.

src/core/bbr.c — upstream added a NOLINTNEXTLINE(clang-analyzer-security.ArrayBound) above QuicPathGetDatagramPayloadSize(&Connection->Paths[0]). The fork reads PathID->Path there instead, since congestion control is per path ID under multipath, and has no Connection local at all. Kept the fork's expression with upstream's suppression above it.

src/core/crypto.c — upstream added the same kind of suppression above Connection->State.HandshakeConfirmed = TRUE; the fork had added an early return when it is already set. Independent, so both are kept, guard first.

Both suppressions are needed, and the one in crypto.c had to move. The analyzer reports at the first access to the containing record, which in the fork's crypto.c is the guard, not the assignment upstream put their comment above; NOLINTBEGIN/NOLINTEND now covers both statements so it does not have to be revisited if the reported line shifts. Verified by running the CI's own toolchain — clang-tidy 21.1.8, from ghcr.io/microsoft/msquic/linux-build-xcomp:ubuntu-26.04-cross — over every source file this fork changes relative to upstream: all 26 pass, and removing either suppression reproduces the exact CI error.

.github/workflows/test.yml, .github/workflows/stress.yml — upstream bumped the Windows XDP jobs from xdp-v1.1 to xdp-v1.4 and, in the same region, added WinServerPrerelease matrix entries. Took the XDP bump; did not reintroduce WinServerPrerelease, which #14 removed from this fork because those jobs need Microsoft's self-hosted 1ES.Pool=1es-msquic-pool. The fork's windows-2025 substitutes for the two Full.Verbose schannel jobs are kept. Upstream's deletion of the openssl+XDP recvfuzz entry is taken as a plain deletion.

After the merge no xdp-v1.1 reference and no WinServerPrerelease matrix entry remains.

Testing

Sweep	Result
*Multipath*:*Path*:*Migration*:*UnconnectedSocket*:*KeepAlive*	109 tests pass
*Basic*:*Datagram*:*Receive*:*Recv*:*Handshake*	986 tests pass

Build is clean, no compiler warnings.

The first push failed the six -CodeCheck jobs on a single diagnostic at crypto.c:490, fixed in the follow-up commit. Local clang-tidy is 18 and does not reproduce it at all, which is why the merge commit shipped with the suppression in the wrong place; the CI container was used for verification afterwards.

Spot-checked that the fork's own work survived the merge intact: the per-path keep alive (Path->LastSendTimeUs stamped in QuicPacketBuilderSendBatch, read by QuicConnPathKeepAliveTimerUpdate), and that microsoft#6217's active-path promotion guard sits inside the existing !MultipathNegotiated branch so it does not affect multipath connections.

Documentation

No documentation change of its own. docs/Settings.md, docs/XDP.md, docs/Release.md and docs/TEST.md move with upstream.

[codecov]

Codecov Report

❌ Patch coverage is 78.57143% with 3 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
src/core/connection.c	70.00%	3 Missing ⚠️

📢 Thoughts on this report? Let us know!