Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add test for ROC mіsmatch #725

Merged
merged 2 commits into from
Nov 13, 2024
Merged

add test for ROC mіsmatch #725

merged 2 commits into from
Nov 13, 2024

Conversation

fippo
Copy link
Contributor

@fippo fippo commented Sep 30, 2024

illustrating the reason why one should carefully pick the initial sequence number low enough to avoid a rollover.

See
https://webrtc-review.googlesource.com/c/src/+/358360

@fippo fippo force-pushed the roc-mismatch-test branch 2 times, most recently from 18da4a4 to 8b4f99f Compare September 30, 2024 02:55
illustrating the reason why one should carefully pick the initial
sequence number low enough to avoid a rollover.

See
  https://webrtc-review.googlesource.com/c/src/+/358360
@fippo
Copy link
Contributor Author

fippo commented Sep 30, 2024

Quite interesting that not everything fails... it fails when using OpenSSL but not in "normal" / builtin mode?!
The reason for the failure is that the failed attempt to unprotect modifies pkt1 and pkt2 which is quite surprising.

Avoided by modifying the test slightly, see second commit.

@pabuhler
Copy link
Member

@fippo Hi, I was curious why it failed with openssl, in the end it was not so exciting. When built with openssl the test uses the GCM cipher which does the decryption & authentication at the same time so it does not fail until it is complete.
Will merge now and then work on adding support for trying ROC -1 when check new streams.

@pabuhler pabuhler merged commit 3c0b0f9 into cisco:main Nov 13, 2024
39 checks passed
@fippo fippo deleted the roc-mismatch-test branch November 13, 2024 03:00
@fippo
Copy link
Contributor Author

fippo commented Nov 13, 2024

ah, that makes sense, thanks for figuring that out!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants