DragonX/SilentDragonXLite
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Fix message type metadata leakage in websocket

Browse Source
This commit is contained in:
DenioD
2020-01-19 11:53:42 +01:00
parent ad97ba229a
commit b1bf1c73b9
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/websockets.cpp
View File

@@ -432,9 +432,12 @@ void AppDataServer::saveNonceHex(NonceType nt, QString noncehex) {
// Encrypt an outgoing message with the stored secret key. // Encrypt an outgoing message with the stored secret key.
QString AppDataServer::encryptOutgoing(QString msg) { QString AppDataServer::encryptOutgoing(QString msg) {
if (msg.length() % 256 > 0) { int padding = 16*1024;
msg = msg + QString(" ").repeated(256 - (msg.length() % 256)); qDebug() << "Encrypt msg(pad="<<padding<<") prepad len=" << msg.length();
if (msg.length() % padding > 0) {
msg = msg + QString(" ").repeated(padding - (msg.length() % padding));
} }
qDebug() << "Encrypt msg postpad len=" << msg.length();
QString localNonceHex = getNonceHex(NonceType::LOCAL); QString localNonceHex = getNonceHex(NonceType::LOCAL);