Skip to content

协议序号校验 #8

@philipyao

Description

@philipyao

看到代码里有段逻辑是进行协议序号校验的,可以防止重放攻击:
// 数据包序列号验证
if seq_id != sess.PacketCount {
sess.Flag |= SESS_KICKED_OUT
return nil
}
很多情况下这可能造成误判,有时候并不是故意重放,比如客户端由于网络原因没有收到服务器回包,会重发上一次请求,这属于正常重放。

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions