mirror of
https://github.com/shadowsocks/shadowsocks-rust.git
synced 2026-11-06 16:14:11 +00:00
SIP022 requires that in a request header, either initial payload or padding MUST be present. When the first payload is empty (e.g. handshake triggered by an empty write for server-first protocols), the client could pick padding 0 with probability 1/901, generating a header that servers MUST reject per the spec, causing ~1/901 handshakes to fail against ssserver built from the same crate. Pick the padding size from 1..=AEAD2022_MAX_PADDING_SIZE instead. fix #2184
shadowsocks
This is a port of shadowsocks.
shadowsocks is a fast tunnel proxy that helps you bypass firewalls.