Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improved path challenge handling. #483

Merged
merged 1 commit into from
Jun 18, 2024
Merged

Conversation

rthalley
Copy link
Contributor

  1. We are willing to reply to up to 5 outstanding challenges on a connection, as it is legal for a client to send more than one. We limit to 5 to prevent excessive challenging.

  2. We now accept path challege responses on any network path, in accordance with RFC 9000 section 8.2.3.

Copy link

codecov bot commented Mar 10, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 100.00%. Comparing base (6c5b9db) to head (77014f8).

Additional details and impacted files
@@            Coverage Diff            @@
##              main      #483   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           25        25           
  Lines         4976      4987   +11     
=========================================
+ Hits          4976      4987   +11     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@rthalley
Copy link
Contributor Author

This patch addresses the issue raised by [#189], though with a different implementation. It also addresses another issue, which is that we may need to reply to more than one remote challenge on the same path. Both sides are bounded, currently to 5 items, to avoid any possible resource attack. There are tests and coverage remains at 100%.

@rthalley
Copy link
Contributor Author

I will lint this one further and push an update tonight or tomorrow morning

@jlaine jlaine self-requested a review June 18, 2024 13:16
Copy link
Contributor

@jlaine jlaine left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great, thanks for the explicit comments!

1) We are willing to reply to up to 5 outstanding challenges
on a connection, as it is legal for a client to send more than
one.  We limit to 5 to prevent excessive challenging.

2) We now accept path challege responses on any network path,
in accordance with RFC 9000 section 8.2.3.
@rthalley rthalley merged commit b507364 into aiortc:main Jun 18, 2024
29 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants