Skip to content

webrtc: Ensure nonstun packets cannot panic transport layer#550

Merged
lexnv merged 3 commits intomasterfrom
lenxv/stun-pkt
Mar 2, 2026
Merged

webrtc: Ensure nonstun packets cannot panic transport layer#550
lexnv merged 3 commits intomasterfrom
lenxv/stun-pkt

Conversation

@lexnv
Copy link
Collaborator

@lexnv lexnv commented Feb 27, 2026

While at it, extend the STUN packet validation with the magic cookie check.

cc @haikoschol @dmitry-markin

Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv lexnv self-assigned this Feb 27, 2026
@lexnv lexnv merged commit 0573627 into master Mar 2, 2026
8 checks passed
@lexnv lexnv deleted the lenxv/stun-pkt branch March 2, 2026 09:48
dmitry-markin added a commit that referenced this pull request Mar 2, 2026
## [0.13.2] - 2026-03-02

This is a hotfix release fixing ping protocol panic in debug builds. The
release also includes WebRTC fixes.

### Fixed

- webrtc/fix: Ensure delay future is awaited
([#548](#548))
- ping: Fix panic in debug builds
([#551](#551))
- webrtc: Ensure nonstun packets cannot panic transport layer
([#550](#550))
- webrtc: Avoid memory leaks by cleaning stale hashmap entries
([#549](#549))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants