Projects STRLCPY dnstt Commits b6b80398
🤬
  • Close smux session in acceptStreams of server.

    This was a memory leak.
    
    Compare to the `sess.Close()` in the client:
    https://repo.or.cz/dnstt.git/blob/2fe067548848f7dd1acb527a20699d7d2358d150:/dnstt-client/main.go#l174
    
    This is issue UCB-02-002 from the 2021 security audit of Turbo Tunnel by
    Cure53.
  • Loading...
  • David Fifield committed 3 years ago
    b6b80398
    1 parent 7b033a38
  • ■ ■ ■ ■ ■
    dnstt-server/main.go
    skipped 236 lines
    237 237   if err != nil {
    238 238   return err
    239 239   }
     240 + defer sess.Close()
    240 241   
    241 242   for {
    242 243   stream, err := sess.AcceptStream()
    skipped 660 lines
Please wait...
Page is in error, reload to recover