rustdeskandClaude Opus 5 955621899e tcp: keep the advertisement check armed until an echo arrives ...

The check was spent on the first frame that decrypted, whatever it held.
A server tags the messages it chooses to, and a frame carrying no echo
reads as `echoed == 0`, which passes; on the way out it also disarmed the
check for good, so an attacker who rewrote the advertised version only had
to let one untagged frame through to be rid of the only thing that would
have caught it.

A zero now says nothing either way and leaves the check standing. Only a
non-zero echo settles the question, matching or refusing the stream.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EZ49AbZJYfm8NTp5yDPMab

2026-09-21 18:33:33 +08:00

examples

move the modules only rustdesk uses out to the base crate

2026-09-08 08:53:58 +08:00

protos

tcp: key exchange version 1, one stream key per direction

2026-09-21 18:33:33 +08:00

src

tcp: keep the advertisement check armed until an echo arrives

2026-09-21 18:33:33 +08:00

.gitignore

init

2025-01-20 16:06:27 +08:00

build.rs

move the modules only rustdesk uses out to the base crate

2026-09-08 08:53:58 +08:00

Cargo.toml

websocket: tungstenite 0.29 from rustdesk-org, read buffer grown as bytes arrive

2026-09-21 17:58:32 +08:00

S

Description

No description provided

74 MiB

Languages

Rust 100%