search for: receive_tcppacket

Hallo, I?m using tincd now since the old days of 1.0pre4 and ist pretty good software. Ths week I went to upgrade from 1.0pre7 to 1.0.1 and failed. The tincd process gets aborted inside the libcrypto library with OPENSSL_assert (inl >0). Tracking down that problem I found, that the EVP_DecryptUpdate gets called in meta.c with the last argument containing a negativ value (lenin is -204).

...aclength, n->inmaclength); } static void receive_udppacket(node_t *n, vpn_packet_t *inpkt) { @@ -260,6 +261,10 @@ n->name, n->hostname); return; } + + /* Remove flags */ + + inpkt->len -= sizeof(inpkt->flags); /* Check packet length */ @@ -367,6 +372,7 @@ void receive_tcppacket(connection_t *c, char *buffer, int len) { vpn_packet_t outpkt; + memset(&outpkt.flags, 0, sizeof(outpkt.flags)); outpkt.len = len; if(c->options & OPTION_TCPONLY) @@ -475,6 +481,10 @@ inpkt->len += n->outmaclength; } + /* Add flags (not encrypted) */ + + inpkt->le...

...t;flag_bits; inpkt =3D outpkt; - - origlen -=3D MTU/64 + 20; } =20 inpkt->priority =3D 0; =20 - if(!inpkt->data[12] && !inpkt->data[13]) - mtu_probe_h(n, inpkt, origlen); + if(inpkt->flags.pmtud) + mtu_probe_h(n, inpkt); else receive_packet(n, inpkt); } =20 void receive_tcppacket(connection_t *c, char *buffer, int len) { vpn_packet_t outpkt; - memset(&outpkt.flags, 0, sizeof(outpkt.flags)); + outpkt.flag_bits =3D 0; =20 outpkt.len =3D len; if(c->options & OPTION_TCPONLY) @@ -420,10 +424,12 @@ return; } =20 - if(n->options & OPTION_PMTU_DISCOVERY...