mirror of
https://github.com/openlibrecommunity/olcrtc.git
synced 2026-07-03 14:05:39 +02:00
neuronori
23db4c13fe
vp8channel runs kcp with block=nil (no fec, no checksum), so the fake-vp8 carrier has no integrity protection. an sfu that perturbs a payload byte lets a corrupt-but-parseable kcp segment ride through as valid in-order data and break the muxconn aead above it, surfacing as chacha20poly1305: message authentication failed under sustained transfers (issue #109). append a crc32 trailer to every kcp packet at the kcpconn seam and verify+strip it on deliver; a mismatch drops the packet so kcp retransmits via sack, restoring udp-equivalent semantics below kcp.