Skip to content

Release 2.7.1: security fixes, maintained by Open Road MP - #93

Closed
nils-kt wants to merge 1 commit into
zpl-c:masterfrom
Open-Road-MP:master
Closed

nils-kt wants to merge 1 commit into
zpl-c:masterfrom
Open-Road-MP:master

Conversation

@nils-kt

@nils-kt nils-kt commented Oct 15, 2026

Copy link
Copy Markdown
  • handshake: VERIFY_CONNECT sent at most ENET_HANDSHAKE_ATTEMPTS (2) times, no reflection amplification with forged CONNECTs
  • check_timeouts: bounded shift, 1u << (sendAttempts - 1) was undefined behaviour from 33 attempts on (Fix UB in check_timeouts shift and CRC reflect #90)
  • reflect_crc: unsigned shifts (Fix UB in check_timeouts shift and CRC reflect #90)
  • drop datagrams shorter than their own header
  • zero the reassembly buffers of fragmented packets
  • clamp the packet throttle parameters from the remote side
  • README: maintained by Open Road MP, recommended settings for public servers

- handshake: VERIFY_CONNECT sent at most ENET_HANDSHAKE_ATTEMPTS (2) times,
  no reflection amplification with forged CONNECTs
- check_timeouts: bounded shift, 1u << (sendAttempts - 1) was undefined
  behaviour from 33 attempts on (zpl-c#90)
- reflect_crc: unsigned shifts (zpl-c#90)
- drop datagrams shorter than their own header
- zero the reassembly buffers of fragmented packets
- clamp the packet throttle parameters from the remote side
- README: maintained by Open Road MP, recommended settings for public servers
@nils-kt nils-kt closed this Oct 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant