Thomas Eizinger 271c480357 fix(connlib): don't attempt to encrypt too large packets (#7263) ...

When encrypting packets, we need to reserve a buffer within which
boringtun will encrypt the IP packet. Unfortunately, `boringtun` panics
if that buffer is not big enough which essentially brings all of
`connlib` down.

Really, we should never see a packet that is too large and ideally, we
enforce this at compile-time by creating different variants of
`IpPacket` that are sized accordingly. That is a large refactoring so
until then, we simply discard them instead of panicking.

---------

Signed-off-by: Thomas Eizinger <thomas@eizinger.io>
Co-authored-by: Jamil <jamilbk@users.noreply.github.com>

2024-11-05 04:17:21 +00:00

..

proptest-regressions

chore(connlib): implement IP translation according to RFC6145 (#5364)

2024-06-14 21:33:07 +00:00

src

fix(connlib): don't attempt to encrypt too large packets (#7263)

2024-11-05 04:17:21 +00:00

Cargo.toml

build(deps): Bump etherparse from 0.15.0 to 0.16.0 in /rust (#7167)

2024-10-31 04:46:57 +00:00