GarlicRust - heartbleed style vulnerability in major I2P C++ router implementations
该报告还没有中文解读。
原文摘录
摘自原文（5282 字符中的一小部分）
Brief ----- I2pd and kovri are both C++ I2P routers that share the same code base, as kovri was forked from i2pd several years ago. The vulnerability lies in a common code piece, making both implementations vulnerable, as was acknowledged by orignal, the main developer of i2pd. The vulnerability is …
原文中的代码
GarlicDeliveryType delivery_type = (GarlicDeliveryType)((flag >> 5) & 0x03);
switch (delivery_type) {
case eGarlicDeliveryTypeLocal:
LOG(debug) << "GarlicDestination: Garlic type local";
HandleI2NPMessage(buf, len, from);
break;
case …默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Internet Bug Bounty 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @aerodudrizzt · 版权归作者与 Internet Bug Bounty 所有