mirror of
https://github.com/SagerNet/sing-box.git
synced 2026-10-21 19:44:13 +00:00
The universal proxy platform
https://sing-box.sagernet.org/
e0ad90bcd9
P2: Darwin IN iso responses accepted malformed RET_SUBMIT descriptors — aggregate ActualLength was checked but per-descriptor Offset/Length were not, and ScatterIsoResponse silently clamped bad values into apparent success. ValidateIsoResponse now lives in iso_scheduler.go beside EncodeIsoSubmit/RebaseFrame and enforces the single-packet shape (Offset == 0, Length == requestLen, ActualLength <= Length, sum == header, payload covers range). pendingTransfer.validateResponse routes every RET_SUBMIT shape check through one named seam so future defects land in one place, and ScatterIsoResponse drops its defensive clamps so the data-movement primitive can no longer mask a validation gap. P2: kernelHandoffSession.Close mutated h.conn/h.monitorFile/h.relayConn outside stateAccess while Start reads them under that lock; the server registers prepared sessions before Start, so Close-before-Start can race the direct-TCP path during import-time shutdown. Close now snapshots and nils the three fields under stateAccess before closing the locals via closeOnce, restoring symmetry with Start's under-lock reads and matching the copy-under-lock, close-outside idiom established by exportLedger.CloseAllSubscribers and ServerService.Close. |
||
|---|---|---|
| .github | ||
| adapter | ||
| clients | ||
| cmd | ||
| common | ||
| constant | ||
| daemon | ||
| dns | ||
| docs | ||
| experimental | ||
| include | ||
| log | ||
| option | ||
| protocol | ||
| release | ||
| route | ||
| service | ||
| test | ||
| transport | ||
| .fpm_openwrt | ||
| .fpm_pacman | ||
| .fpm_systemd | ||
| .gitignore | ||
| .gitmodules | ||
| .golangci.yml | ||
| box.go | ||
| debug.go | ||
| debug_http.go | ||
| debug_stub.go | ||
| debug_unix.go | ||
| Dockerfile | ||
| Dockerfile.binary | ||
| go.mod | ||
| go.sum | ||
| LICENSE | ||
| Makefile | ||
| mkdocs.yml | ||
| README.md | ||
sing-box
The universal proxy platform.
Documentation
License
Copyright (C) 2022 by nekohasekai <contact-sagernet@sekai.icu>
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
In addition, no derivative work may use the name or imply association
with this application without prior consent.