[freeciv/freeciv] d26a97: Protect against DOS attack with recursive jumbo pa...

  Branch: refs/heads/S3_3
  Home:   https://github.com/freeciv/freeciv
  Commit: d26a974a866490e686250244c5c3bb42be9c0623
      https://github.com/freeciv/freeciv/commit/d26a974a866490e686250244c5c3bb42be9c0623
  Author: Marko Lindqvist <[email protected]>
  Date:   2026-03-21 (Sat, 21 Mar 2026)

  Changed paths:
    M client/clinet.c
    M common/networking/packets.c
    M common/networking/packets.h
    M server/sernet.c

  Log Message:
  -----------
  Protect against DOS attack with recursive jumbo packets

Receiving side of the old network code allowed jumbo
packets inside jumbo packets recursively, though such
recursion is never needed. Handling such recursion
could easily lead to a crash of the receiver.
Malicious sender could craft such recursive jumbo packets
to crash servers or clients.
The fix simply disallows recursive jumbo packets.

Reported by Louis Moureaux

See RM #1955

Signed-off-by: Marko Lindqvist <[email protected]>



To unsubscribe from these emails, change your notification settings at https://github.com/freeciv/freeciv/settings/notifications