eburet-oss/wireguard-go-awg2-lx
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: apply S4 transport padding to keepalive packets

Browse source 
Keepalive packets were excluded from S4 padding because the padding
logic was nested inside the dataSent guard. The receiving side
(DeterminePacketTypeAndPadding) expects S4 padding on all transport
packets, so unpadded keepalives fail H4 header validation and are
silently dropped.

This prevents the responder from completing key confirmation —
lastHandshakeNano stays 0 until real data flows through the tunnel.
This commit is contained in:
admin 2026-03-31 16:37:57 +03:00 • committed by Yaroslav Gurov
parent 12a012205e
commit f4f4c99926
1 changed files with 8 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

3
device/send.go
View file

@ -574,7 +574,7 @@ func (peer *Peer) RoutineSequentialSender(maxBatchSize int) {
for _, elem := range elemsContainer.elems { for _, elem := range elemsContainer.elems {
if len(elem.packet) != MessageKeepaliveSize { if len(elem.packet) != MessageKeepaliveSize {
dataSent = true dataSent = true
}
if padding := device.paddings.transport; padding > 0 { if padding := device.paddings.transport; padding > 0 {
// elem.packet is stored at the start of elem.buffer // elem.packet is stored at the start of elem.buffer
// with zero padding // with zero padding
@ -584,7 +584,6 @@ func (peer *Peer) RoutineSequentialSender(maxBatchSize int) {
rand.Read(elem.buffer[:padding]) rand.Read(elem.buffer[:padding])
elem.packet = elem.buffer[:padding+len(elem.packet)] elem.packet = elem.buffer[:padding+len(elem.packet)]
} }
}
bufs = append(bufs, elem.packet) bufs = append(bufs, elem.packet)
} }