mirrors/Xray-core
1
0
Fork 0
mirror of https://github.com/XTLS/Xray-core.git synced 2025-05-09 21:58:41 +00:00
Code Issues Projects Releases Packages Wiki Activity

Add packet length valid check

Browse source
This commit is contained in:
风扇滑翔翼 2025-05-07 14:14:30 +00:00 • committed by GitHub
parent 7484097da8
commit e3b9e2543b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
common/protocol/quic/sniff.go
View file

@ -4,8 +4,8 @@ import (
"crypto" "crypto"
"crypto/aes" "crypto/aes"
"crypto/tls" "crypto/tls"
"fmt"
"encoding/binary" "encoding/binary"
"fmt"
"io" "io"
"github.com/quic-go/quic-go/quicvarint" "github.com/quic-go/quic-go/quicvarint"
@ -169,6 +169,10 @@ func SniffQUIC(b []byte) (*SniffHeader, error) {
return nil, err return nil, err
} }
// very stange packet length, maybe a fake QUIC header
if packetNumberLength > int(packetLen) {
return nil, errNotQuic
}
extHdrLen := hdrLen + packetNumberLength extHdrLen := hdrLen + packetNumberLength
data := b[extHdrLen : int(packetLen)+hdrLen] data := b[extHdrLen : int(packetLen)+hdrLen]
decrypted, err := cipher.Open(b[extHdrLen:extHdrLen], nonce, data, b[:extHdrLen]) decrypted, err := cipher.Open(b[extHdrLen:extHdrLen], nonce, data, b[:extHdrLen])