mirror of
https://github.com/OpenVPN/openvpn.git
synced 2026-02-03 20:39:40 -05:00
When the sender jumps forwards exactly epoch_data_keys_future_count in its epoch key use the housekeeping logic does not handle this correctly and triggers an ASSERT. Change the code to correctly implement the special case when the new epoch key of the sender is the highest valid key epoch in the current window of valid epoch keys for receiving data. Change-Id: Ib581c02a29b974184256a9f4ad0ce15ba5f9db3b Signed-off-by: Arne Schwabe <arne@rfc2549.org> Acked-By: Max Fillinger <maximilian.fillinger@sentyron.com> Reported-By: Pavel Kohout of Aisle Research <pavel.kohout@aisle.com> Github: closes OpenVPN/openvpn-private-issues#103 CVE: 2025-15497 |
||
|---|---|---|
| .. | ||
| unit_tests | ||
| lwip_client_up.sh | ||
| Makefile.am | ||
| ntlm_support.c | ||
| null_client_up.sh | ||
| t_client.rc-sample | ||
| t_client.sh.in | ||
| t_cltsrv-down.sh | ||
| t_cltsrv.sh | ||
| t_lpback.sh | ||
| t_net.sh | ||
| t_server_null.rc-sample | ||
| t_server_null.sh | ||
| t_server_null_client.sh | ||
| t_server_null_default.rc | ||
| t_server_null_server.sh | ||
| t_server_null_stress.sh | ||
| update_t_client_ips.sh | ||