Ghost
released this
2026-07-09 00:54:55 +03:00
| 2675 commits to dev since this release
- connection_abstract: parseNotSecureResponse returned a span sized in
bytes but make_span expects an element (mtpPrime) count, causing a 4x
out-of-bounds read while parsing the fake req_pq reply.
- send: in the container path invokeWithLayer/initConnection was nested
inside invokeAfterMsg; reorder so the layer wrapper stays outermost
(matches the single-request path).
- tls_socket_handshake: guard checkHelloDigest against a too-short
Server Hello to avoid an out-of-bounds subspan (remote crash from a
malicious proxy).
- rsa_public_key: fix right-alignment offset in decrypt() to mirror
encrypt() (wrong offset on short RSA results).
Downloads