`android` 等客户端指纹导致 panic

[davidxuang]

• 服务端
  • xray-core 1.8.0 on Debian Testing x86-64
• 客户端
  • xray-core 1.8.0 on Windows 11 22H2 x86-64
  • NekoBox for Android 1.0.0 (sing-box-extra 1.2.2-2)
• 脱敏客户端 outbound

  {
  "tag": "proxy",
  "protocol": "vless",
  "settings": {
    "vnext": [
      {
        "address": "1.1.1.1",
        "port": 443,
        "users": [
          {
            "id": "00000000-0000-0000-0000-000000000000",
            "alterId": 0,
            "email": "a@a.com",
            "security": "auto",
            "encryption": "none",
            "flow": "xtls-rprx-vision"
          }
        ]
      }
    ]
  },
  "streamSettings": {
    "network": "tcp",
    "security": "reality",
    "realitySettings": {
      "serverName": "a.com",
      "fingerprint": "android", // 已控制唯一变量
      "show": false,
      "publicKey": "ggggggggggggggggggggggggggggggggggggggggggg",
      "shortId": "",
      "spiderX": ""
    }
  },
  "mux": {
    "enabled": false,
    "concurrency": -1
  }
  }

• 示例 log

  • 测试命令 aria2c https://google.com --all-proxy=http://localhost:8080
  • android 指纹

    
    Xray 1.8.0 (Xray, Penetrates Everything.) Custom (go1.20.2 windows/amd64)
    A unified platform for anti-censorship.
    2023/04/04 13:02:24 [Info] infra/conf/serial: Reading config: .\reality-android.json
    2023/04/04 13:02:24 [Warning] core: Xray 1.8.0 started
    2023/04/04 13:03:26 127.0.0.1:54057 accepted //google.com:443 [http -> proxy]
    panic: runtime error: invalid memory address or nil pointer dereference
    [signal 0xc0000005 code=0x0 addr=0x28 pc=0x105b47f]

  goroutine 40 [running]: github.com/xtls/xray-core/transport/internet/reality.UClient({0x1b203a8, 0xc0018940a0}, 0xc000738160, {0xc00023f768?, 0x0?}, {{0x1b18b90?, 0xc00023f768?}, 0x0?, 0x0?}) github.com/xtls/xray-core/transport/internet/reality/reality.go:132 +0x8df github.com/xtls/xray-core/transport/internet/tcp.Dial({0x1b171c0, 0xc0002d8ae0}, {{0x1b18b90, 0xc00023f768}, 0x1bb, 0x2}, 0xc00052ee60) github.com/xtls/xray-core/transport/internet/tcp/dialer.go:34 +0x250 github.com/xtls/xray-core/transport/internet.Dial({0x1b171c0, 0xc0002d8ae0}, {{0x1b18b90?, 0xc00023f768?}, 0xf768?, 0xc0?}, 0x0?) github.com/xtls/xray-core/transport/internet/dialer.go:57 +0x1ef github.com/xtls/xray-core/app/proxyman/outbound.(Handler).Dial(0xc000169f80, {0x1b171c0?, 0xc0002d8ae0?}, {{0x1b18b90, 0xc00023f768}, 0x1bb, 0x2}) github.com/xtls/xray-core/app/proxyman/outbound/handler.go:218 +0xad7 github.com/xtls/xray-core/proxy/vless/outbound.(Handler).Process.func1() github.com/xtls/xray-core/proxy/vless/outbound/outbound.go:80 +0xa3 github.com/xtls/xray-core/common/retry.(retryer).On(0xc000263bd0, 0xc000263c38) github.com/xtls/xray-core/common/retry/retry.go:27 +0xdb github.com/xtls/xray-core/proxy/vless/outbound.(Handler).Process(0xc0002d88d0, {0x1b171c0, 0xc0002d8ae0}, 0xc0007160c0, {0x1b0ee00, 0xc000169f80}) github.com/xtls/xray-core/proxy/vless/outbound/outbound.go:77 +0x1ec github.com/xtls/xray-core/app/proxyman/outbound.(Handler).Dispatch(0xc0002f45a0?, {0x1b171c0, 0xc0002d8ae0}, 0xc0007160c0) github.com/xtls/xray-core/app/proxyman/outbound/handler.go:147 +0x211 github.com/xtls/xray-core/app/dispatcher.(DefaultDispatcher).routedDispatch(0xc0004c67e0, {0x1b171c0, 0xc0002d8ae0}, 0xc0007160c0, {{0x1b18b58, 0xc00007c8e0}, 0x1bb, 0x2}) github.com/xtls/xray-core/app/dispatcher/default.go:492 +0xbfe created by github.com/xtls/xray-core/app/dispatcher.(*DefaultDispatcher).Dispatch github.com/xtls/xray-core/app/dispatcher/default.go:302 +0x4ea

  - `edge` 指纹
  ```log
  Xray 1.8.0 (Xray, Penetrates Everything.) Custom (go1.20.2 windows/amd64)
  A unified platform for anti-censorship.
  2023/04/04 13:03:50 [Info] infra/conf/serial: Reading config: .\reality-edge.json
  2023/04/04 13:03:50 [Warning] core: Xray 1.8.0 started
  2023/04/04 13:03:52 127.0.0.1:54062 accepted //google.com:443 [http -> proxy]
  2023/04/04 13:03:53 127.0.0.1:54072 accepted //www.google.com:443 [http -> proxy]

• 补充信息 该问题亦会在其他配置情形下复现，如 1.7.5 on Debian 11 服务端下的 vmess-grpc-tls、vless-tcp-vision；360 指纹似乎亦有类似问题。

[cccp6]

It's been 9 months and no one has ever fixed this. @RPRX please help. At least remove the non-existant fingerprints.

[Fangliding]

唔 panic