Skip to content

socks_sspi: invalid response length is a fatal error#21999

Closed
bagder wants to merge 1 commit into
masterfrom
bagder/sspi-inv-length
Closed

socks_sspi: invalid response length is a fatal error#21999
bagder wants to merge 1 commit into
masterfrom
bagder/sspi-inv-length

Conversation

@bagder

@bagder bagder commented Jun 14, 2026

Copy link
Copy Markdown
Member

Pointed out by Zeropath

@bagder bagder marked this pull request as ready for review June 14, 2026 10:14
@bagder bagder requested a review from Copilot June 14, 2026 10:15

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Makes an invalid SSPI SOCKS5 encryption response length a fatal error during GSS-API/SSPI negotiation, preventing continuation with an unexpected decrypted payload size.

Changes:

  • Abort via goto fail when the decrypted SSPI response length is not exactly 1 byte, instead of continuing execution.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@bagder bagder closed this in fb83911 Jun 14, 2026
@bagder bagder deleted the bagder/sspi-inv-length branch June 14, 2026 10:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

2 participants