Alex Melan bc72b106b7 fix: reject malformed network input in parsers (#1340) ...

## Summary
- validate handshake metadata field lengths before fixed-size reads
- reject truncated multicast advertisements before slicing the hash
payload
- add regression tests for malformed and truncated input

## Why
Both parsers currently trust length information from the incoming
payload a bit too much. Malformed network input can reach fixed-size
reads/slices and panic the process instead of being rejected cleanly.

## Testing
- go test ./...

2026-04-11 12:04:12 +01:00

..

api.go

Linter update & fixes

2026-01-18 14:51:52 +00:00

core_test.go

Add unit test for AllowedPublicKeys

2024-09-29 22:04:41 +01:00

core.go

Linter update & fixes

2026-01-18 14:51:52 +00:00

debug.go

Fix PPROFLISTEN

2023-11-28 13:24:54 +00:00

link_quic.go

Linter update & fixes

2026-01-18 14:51:52 +00:00

link_socks.go

Linter update & fixes

2026-01-18 14:51:52 +00:00

link_tcp_darwin.go

Run go fix, corrects mostly build tags

2026-01-18 14:47:18 +00:00

link_tcp_linux.go

Fix lint error

2026-01-18 15:04:28 +00:00

link_tcp_other.go

Run go fix, corrects mostly build tags

2026-01-18 14:47:18 +00:00

link_tcp.go

Fix outbound link-local connections on mobile (#1300)

2026-01-18 19:12:31 +00:00

link_tls.go

Linter update & fixes

2026-01-18 14:51:52 +00:00

link_unix.go

Reusable peer lookup/dial logic

2024-11-17 21:14:54 +00:00

link_ws.go

Linter update & fixes

2026-01-18 14:51:52 +00:00

link_wss.go

Linter update & fixes

2026-01-18 14:51:52 +00:00

link.go

Prevent adding empty peers at runtime

2026-02-23 22:55:06 +00:00

nodeinfo.go

Linter update & fixes

2026-01-18 14:51:52 +00:00

options_test.go

Prevent adding empty peers at runtime

2026-02-23 22:55:06 +00:00

options.go

Reusable peer lookup/dial logic

2024-11-17 21:14:54 +00:00

pool.go

try to cheer up the linter again

2023-05-21 12:49:49 -05:00

proto.go

Validate public key lengths on debug_ API endpoints (fixes #1113)

2023-12-03 17:55:12 +00:00

tls.go

Don't require TLS client certificate

2023-10-15 23:06:10 +01:00

types.go

have the core wrap and export the underlying PacketConn, move IPv6 ReadWriteCloser wrapper logic to a separate package

2021-07-05 13:14:12 -05:00

version_test.go

fix: reject malformed network input in parsers (#1340)

2026-04-11 12:04:12 +01:00

version.go

fix: reject malformed network input in parsers (#1340)

2026-04-11 12:04:12 +01:00