void/amneziawg-go
2
0
Fork 0
mirror of https://github.com/amnezia-vpn/amneziawg-go.git synced 2025-07-28 07:52:50 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

add magic value sameness check

Browse source
This commit is contained in:
Mark Puha 2023-09-19 17:07:29 +02:00
parent 78b47a89a8
commit 0e9186510e
1 changed files with 21 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
device/device.go
View file

@ -566,6 +566,26 @@ func (device *Device) isAdvancedSecurityOn() bool {
}
func (device *Device) handlePostConfig(tempASecCfg *aSecCfgType) (err error) {
isSameMap := map[uint32]bool{}
isSameMap[tempASecCfg.initPacketMagicHeader] = true
isSameMap[tempASecCfg.responsePacketMagicHeader] = true
isSameMap[tempASecCfg.underloadPacketMagicHeader] = true
isSameMap[tempASecCfg.transportPacketMagicHeader] = true
// size will be different if same values
if len(isSameMap) != 4 {
err = ipcErrorf(
ipc.IpcErrorInvalid,
`magic headers should differ; got: init:%d; recv:%d; unde:%d;
tran:%d`,
tempASecCfg.initPacketMagicHeader,
tempASecCfg.responsePacketMagicHeader,
tempASecCfg.underloadPacketMagicHeader,
tempASecCfg.transportPacketMagicHeader,
)
return
}
isASecOn := false
device.aSecMux.Lock()
if tempASecCfg.junkPacketCount < 0 {
@ -759,5 +779,5 @@ func (device *Device) handlePostConfig(tempASecCfg *aSecCfgType) (err error) {
device.isASecOn.SetTo(isASecOn)
device.aSecMux.Unlock()
return nil
return err
}