Attention is currently required from: flichtenheld, ordex, plaisthos, stipa.

ralf_lici has posted comments on this change. ( 
http://gerrit.openvpn.net/c/openvpn/+/1084?usp=email )

Change subject: dco: Add support for float notifications
......................................................................


Patch Set 1:

(1 comment)

File src/openvpn/multi.c:

http://gerrit.openvpn.net/c/openvpn/+/1084/comment/347abf04_7c9f0c38 :
PS1, Line 3390:             if (extract_dco_float_peer_addr(peer_id, 
&m->top.c2.from.dest,
> no, we can't trust the kernel. […]
This isn’t actually a parsing of the kernel message, but rather a utility 
function to transpose the content of dco_float_peer_ss into 
m->top.c2.from.dest. Since dco_float_peer_ss is constructed by parsing the 
kernel notification, it would never contain an incorrect address family, thanks 
to a specific check in the Linux parser (ovpn_parse_float_addr()). OTOH, on 
Windows, we simply receive the sockaddr object from the kernel (if my 
understanding is correct), though I assume there’s a similar check in dco-win.

So this 'if' statement is probably redundant on Linux but might act as the 
missing userspace check for Windows. But if you'd rather use an assert (since 
dco_float_peer_ss should never be ill-formed once we reach this point) we could 
add a check in dco_handle_overlapped_success() (or somewhere else in the 
dco_win-specific code) just to be safe.



--
To view, visit http://gerrit.openvpn.net/c/openvpn/+/1084?usp=email
To unsubscribe, or for help writing mail filters, visit 
http://gerrit.openvpn.net/settings

Gerrit-Project: openvpn
Gerrit-Branch: master
Gerrit-Change-Id: I33e9272b4196c7634db2fb33a75ae4261660867f
Gerrit-Change-Number: 1084
Gerrit-PatchSet: 1
Gerrit-Owner: ralf_lici <r...@mandelbit.com>
Gerrit-Reviewer: flichtenheld <fr...@lichtenheld.com>
Gerrit-Reviewer: ordex <anto...@mandelbit.com>
Gerrit-Reviewer: plaisthos <arne-open...@rfc2549.org>
Gerrit-CC: openvpn-devel <openvpn-devel@lists.sourceforge.net>
Gerrit-CC: stipa <lstipa...@gmail.com>
Gerrit-Attention: plaisthos <arne-open...@rfc2549.org>
Gerrit-Attention: flichtenheld <fr...@lichtenheld.com>
Gerrit-Attention: ordex <anto...@mandelbit.com>
Gerrit-Attention: stipa <lstipa...@gmail.com>
Gerrit-Comment-Date: Tue, 15 Jul 2025 15:36:44 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Comment-In-Reply-To: ordex <anto...@mandelbit.com>
Comment-In-Reply-To: stipa <lstipa...@gmail.com>
Gerrit-MessageType: comment
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to