openvpn/tests
Arne Schwabe e0e0720ac3 Correctly handle sender jumping exactly epoch_data_keys_future_count
When the sender jumps forwards exactly epoch_data_keys_future_count in its
epoch key use the housekeeping logic does not handle this correctly and
triggers an ASSERT.

Change the code to correctly implement the special case when the new epoch
key of the sender is the highest valid key epoch in the current window of
valid epoch keys for receiving data.

Change-Id: Ib581c02a29b974184256a9f4ad0ce15ba5f9db3b
Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-By: Max Fillinger <maximilian.fillinger@sentyron.com>
Reported-By: Pavel Kohout of Aisle Research <pavel.kohout@aisle.com>
Github: closes OpenVPN/openvpn-private-issues#103
CVE: 2025-15497
2026-01-15 11:10:56 +01:00
..
unit_tests Correctly handle sender jumping exactly epoch_data_keys_future_count 2026-01-15 11:10:56 +01:00
lwip_client_up.sh Add lwip support to t_server_null 2025-03-08 09:49:51 +01:00
Makefile.am Update Copyright statements to 2026 2026-01-08 10:59:57 +01:00
ntlm_support.c Update Copyright statements to 2026 2026-01-08 10:59:57 +01:00
null_client_up.sh Add t_server_null test suite 2024-06-18 22:41:51 +02:00
t_client.rc-sample t_client.sh: Allow to skip tests 2024-03-08 12:27:05 +01:00
t_client.sh.in t_client.sh: Do not wait 3 seconds for OpenVPN to come up 2025-08-08 07:45:44 +02:00
t_cltsrv-down.sh build: standard directory layout 2012-03-22 22:07:08 +01:00
t_cltsrv.sh Update GPL header in all source files to current recommended version 2025-08-03 16:55:47 +02:00
t_lpback.sh Allow test-crypto to work without the --secret argument 2025-12-22 13:09:24 +01:00
t_net.sh tests: Allow to override openvpn binary used 2023-05-16 17:57:48 +02:00
t_server_null.rc-sample t_server_null: multiple improvements and fixes 2024-07-04 22:26:32 +02:00
t_server_null.sh t_server_null: use wait instead of marker files 2024-10-26 11:50:18 +02:00
t_server_null_client.sh Add lwip support to t_server_null 2025-03-08 09:49:51 +01:00
t_server_null_default.rc Add sample FFDH parameters file and use that in t_server_null tests 2025-08-21 15:26:26 +02:00
t_server_null_server.sh t_server_null: print error when server startup fails 2025-06-18 18:07:13 +02:00
t_server_null_stress.sh t_server_null: multiple improvements and fixes 2024-07-04 22:26:32 +02:00
update_t_client_ips.sh Prevent generation of duplicate EXPECT_IFCONFIG entries 2016-11-08 15:09:52 +01:00