hesoyam/sing-box-extended-mirror
1
0
Fork 0
mirror of https://github.com/shtorm-7/sing-box-extended.git synced 2026-10-20 16:24:25 +00:00
Code Issues Packages Projects Releases 2 Wiki Activity

Fix protocol input validation

Browse Source
This commit is contained in:
世界
2026-10-09 12:36:03 +08:00
parent a0d775ea66
commit 52f9bad034
22 changed files with 165 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files
protocol/bridge/packet.go
+7
View File
@@ -75,6 +75,9 @@ func fixReturnChecksum(packet []byte) {
return
}
ipHdr := header.IPv6(packet)
if !ipHdr.IsValid(len(packet)) {
return
}
recomputeTransportChecksum(ipHdr.TransportProtocol(), ipHdr.Payload(), ipHdr.SourceAddressSlice(), ipHdr.DestinationAddressSlice())
}
}
@@ -86,6 +89,10 @@ func recomputeTransportChecksum(protocol tcpip.TransportProtocolNumber, transpor
return
}
tcpHdr := header.TCP(transport)
dataOffset := int(tcpHdr.DataOffset())
if dataOffset < header.TCPMinimumSize || dataOffset > len(transport) {
return
}
tcpHdr.SetChecksum(0)
payloadChecksum := checksum.Checksum(tcpHdr.Payload(), 0)
pseudoChecksum := header.PseudoHeaderChecksum(header.TCPProtocolNumber, source, destination, uint16(len(transport)))