[Openvpn-commits] [OpenVPN/openvpn] 8bf8be: mudp: fix unaligned 32-bit read when parsing peer ID

[<ope...@li...>]

  Branch: refs/heads/master
  Home:   https://github.com/OpenVPN/openvpn
  Commit: 8bf8bead6d7cc3c743fdf2b915fbb2f3f24e7005
      https://github.com/OpenVPN/openvpn/commit/8bf8bead6d7cc3c743fdf2b915fbb2f3f24e7005
  Author: Gianmarco De Gregori <gia...@ma...>
  Date:   2025-12-10 (Wed, 10 Dec 2025)

  Changed paths:
    M src/openvpn/mudp.c

  Log Message:
  -----------
  mudp: fix unaligned 32-bit read when parsing peer ID

The code previously read a 32-bit value from a uint8_t
buffer using a direct cast and dereference.
This can cause unaligned memory access and undefined
behavior on architectures that do not support unaligned
reads, potentially leading to a one-packet crash.

Fix this by reading the bytes individually and
combining them manually.

Reported-By: Joshua Rogers <co...@jo...>
Found-By: ZeroPath (https://zeropath.com)

Change-Id: Id0bb4c45d373437ab8dbaff7a311745f9b538cbf
Signed-off-by: Gianmarco De Gregori <gia...@ma...>
Acked-by: Gert Doering <ge...@gr...>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1348
Message-Id: <202...@gr...>
Signed-off-by: Gert Doering <ge...@gr...>



To unsubscribe from these emails, change your notification settings at https://github.com/OpenVPN/openvpn/settings/notifications