Max LvandClaude Opus 4.6 ff44361f5d Fix unbounded buffer growth in aead_decrypt chunk reassembly ...

The idx-tracking optimization in aead_decrypt skipped memmove when
partial AEAD chunks spanned multiple calls, but never compacted the
dead space before idx. This caused the chunk buffer to grow
proportionally to total data transferred (~10 MB growth per 10 MB
transferred), tripping the stress test memory leak threshold.

Compact residual data to the front when appending new ciphertext,
keeping the buffer bounded to the size of the residual plus new data.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-09 09:04:58 +08:00

..

acl.c

Clean up

2019-07-17 09:16:06 +08:00

acl.h

Simplify the server auto blocking mechanism

2019-06-01 15:20:45 +08:00

aead.c

Fix unbounded buffer growth in aead_decrypt chunk reassembly

2026-02-09 09:04:58 +08:00

aead.h

bump copyright year

2019-03-21 12:39:29 +08:00

android.c

Clean up

2019-07-17 09:16:06 +08:00

base64.c

Add --key option to set key directly (#1207)

2017-02-06 17:02:04 +08:00

base64.h

Add --key option to set key directly (#1207)

2017-02-06 17:02:04 +08:00

cache.c

cache: Remove unused return from 'cache_key_exist'

2019-10-07 00:12:12 -06:00

cache.h

bump copyright year

2019-03-21 12:39:29 +08:00

CMakeLists.txt

Add Debian package build test and statically link bundled submodules

2026-02-08 11:32:13 +08:00

common.h

Add support of nftables firewall

2021-07-01 12:05:39 +08:00

crypto.c

Fix in 'mbedtls 3.6.0 ver' compilation failure issue

2025-01-20 11:11:47 +08:00

crypto.h

Reduce memory copies in crypto encrypt/decrypt paths

2026-02-09 08:53:28 +08:00

jconf.c

Detect kernel support for MPTCP at runtime

2022-06-23 10:38:32 +08:00

jconf.h

Add --tcp-incoming-rcvbuf and --tcp-outgoing-rcvbuf which allow precise control over TCP receive buffers.

2020-12-23 07:13:14 +08:00

json.c

json: fix signed integer overflows

2025-12-29 17:44:06 +08:00

json.h

Update json.c and fix #1594

2017-07-28 22:55:23 +08:00

local.c

Detect kernel support for MPTCP at runtime

2022-06-23 10:38:32 +08:00

local.h

Fix build

2020-02-11 23:55:58 -05:00

manager.c

fix order of tests to avoid strstr on NULL value

2021-07-16 09:36:54 +08:00

manager.h

Revert "Specify the alignment of all structs"

2019-07-01 14:08:28 +08:00

netutils.c

Fix #2536

2019-11-09 07:08:59 +08:00

netutils.h

Detect kernel support for MPTCP at runtime

2022-06-23 10:38:32 +08:00

plugin.c

close socket to avoid memory leak when error occurs

2021-07-16 09:35:39 +08:00

plugin.h

bump copyright year

2019-03-21 12:39:29 +08:00

ppbloom.c

Merge pull request #2610 from babarosaM33/bloom_reset

2020-01-29 19:54:02 +08:00

ppbloom.h

bump copyright year

2019-03-21 12:39:29 +08:00

redir.c

Detect kernel support for MPTCP at runtime

2022-06-23 10:38:32 +08:00

redir.h

Revert "Specify the alignment of all structs"

2019-07-01 14:08:28 +08:00

resolv.c

Clean up

2018-09-02 17:21:23 -07:00

resolv.h

Re-add support for MinGW

2018-03-08 17:26:11 +08:00

rule.c

Modernize build: switch to CMake, add unit tests, fix man pages

2026-02-07 17:06:47 +08:00

rule.h

Modernize build: switch to CMake, add unit tests, fix man pages

2026-02-07 17:06:47 +08:00

server.c

Detect kernel support for MPTCP at runtime

2022-06-23 10:38:32 +08:00

server.h

Remove sniparser

2020-02-11 23:48:30 -05:00

shadowsocks.h

bump copyright year

2019-03-21 12:39:29 +08:00

socks5.h

Bugfix

2018-07-30 23:06:02 +08:00

ss-nat

Fix ss-nat's log

2019-04-26 17:07:46 +08:00

stream.c

Reduce memory copies in crypto encrypt/decrypt paths

2026-02-09 08:53:28 +08:00

stream.h

bump copyright year

2019-03-21 12:39:29 +08:00

tunnel.c

Detect kernel support for MPTCP at runtime

2022-06-23 10:38:32 +08:00

tunnel.h

bump copyright year

2019-03-21 12:39:29 +08:00

udprelay.c

Redir UDP send back sockets should always be IPv6

2022-06-04 16:48:45 +08:00

udprelay.h

Revert "Specify the alignment of all structs"

2019-07-01 14:08:28 +08:00

uthash.h

Update uthash to latest

2016-12-08 04:10:52 -06:00

utils.c

Detect kernel support for MPTCP at runtime

2022-06-23 10:38:32 +08:00

utils.h

Detect kernel support for MPTCP at runtime

2022-06-23 10:38:32 +08:00

winsock.c

bump copyright year

2019-03-21 12:39:29 +08:00

winsock.h

bump copyright year

2019-03-21 12:39:29 +08:00