Зеркало Leadaxe/wireguard-go-awg2-lx — сабмодуль ядра sing-box-lx (AmneziaWG). GPLv3.
Find a file
Leadaxe ee7ff1b77f lx: fix transport padding buffer overrun + harden AWG config guards
Transport padding (s4) crashed the whole process with
"index out of range" in RoutineSequentialSender on the first data
packet: InputPacket/InputPackets sized elem.buffer without headroom
for the in-buffer right-shift that prepends the random prefix.

- send.go: reserve paddings.transport in both injection-path
  allocLength computations; replace the manual backward byte loop
  with an overlap-safe copy; defensively grow the buffer (pool-backed)
  if it still lacks headroom, dropping packets that cannot fit a
  single WG message instead of overrunning.
- receive.go: drop the rxBytes/timers block duplicated by the AWG
  re-graft (rx accounting was doubled, keepKeyFreshReceiving fired
  twice per batch).
- send.go: swap jmin/jmax when configured inverted (UAPI validates
  the fields only individually; a swapped pair panicked rand.Int
  with a non-positive bound on the first handshake).
- obf*.go: bound obfuscator length args to [0, MaxMessageSize]
  (negative panicked slice bounds, huge ones OOMed the handshake).
- magic-header.go: widen to int64 before end-start+1 so a full-range
  header cannot wrap to a zero rand.Int bound.

Tests: transport_padding_test.go reproduces the on-device crash
byte-for-byte (red on the previous commit, green now) across both
injection paths and the tun path; obf_guards_test.go pins the
config-value guards.
2026-08-05 16:55:02 +03:00
conn Add EgressProvider 2026-07-17 10:48:47 +08:00
device lx: fix transport padding buffer overrun + harden AWG config guards 2026-08-05 16:55:02 +03:00
ipc Rename module 2026-05-17 20:09:28 +08:00
ratelimiter Remove unused 2026-05-17 20:04:34 +08:00
replay Remove unused 2026-05-17 20:04:34 +08:00
rwcancel rwcancel: fix wrong poll event flag on ReadyWrite 2025-05-05 15:10:08 +02:00
tai64n Remove unused 2026-05-17 20:04:34 +08:00
tun Apply Tailscale TUN offload APIs 2026-05-17 20:36:35 +08:00
.gitignore Update .gitignore 2026-05-17 20:02:24 +08:00
go.mod device: add API for on-demand configuration of peers 2026-08-04 19:06:30 +08:00
go.sum Add pause support 2026-05-17 20:36:45 +08:00
LICENSE mod: rename COPYING to LICENSE 2021-03-06 09:09:21 -07:00
Makefile Makefile: don't use test -v because it hides failures in scrollback 2021-11-16 21:07:31 +01:00
reformat.sh Add module rename script 2026-05-17 20:02:24 +08:00
remove-unused.sh Add remove unused script 2026-05-17 20:02:24 +08:00
rename-module.sh Add module rename script 2026-05-17 20:02:24 +08:00
version.go version: bump snapshot 2025-05-22 01:45:02 +02:00