search

drok / ovpn

OVPN is a derivative of OpenVPN focused on infrastructure quality improvements.
https://ovpn.ohmi.org
Other
0 stars 0 forks source link

Data sent before PUSH_REPLY race condition #9

Open drok opened 4 years ago

drok commented 4 years ago

The server can send P_DATA messages to the client before receiving its PUSH_REQUEST and thus replying to it. In turn, the client is unable to decrypt or send it to a tun device (not yet initialized), thus data is lost.