Git-Mirrors/veilid
1
0
Fork 0
mirror of https://gitlab.com/veilid/veilid.git synced 2025-08-02 03:36:07 -04:00
Code Issues Projects Releases Packages Wiki Activity

Merge branch 'fix-448-invalid-framing' into 'main'

Browse source 
reject connections with invalid framing

See merge request veilid/veilid!407
This commit is contained in:
Christien Rioux 2025-05-07 11:24:32 -04:00
commit efaea17f38
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
veilid-core/src/network_manager/native/protocol/tcp.rs
View file

@ -151,6 +151,14 @@ impl RawTcpProtocolHandler {
return Ok(None); return Ok(None);
} }
// Ensure this has a chance of being proper framed, otherwise drop the connection
// This will keep upgraded WS->WSS TLS negotiations from getting punished if the
// WSS accept handler isn't enabled
if peekbuf[0] != b'V' || peekbuf[1] != b'L' {
// Not framed TCP, drop it
return Ok(None);
}
let peer_addr = PeerAddress::new( let peer_addr = PeerAddress::new(
SocketAddress::from_socket_addr(socket_addr), SocketAddress::from_socket_addr(socket_addr),
ProtocolType::TCP, ProtocolType::TCP,