Files
zooqueenandHanzo Dev ba826e5f57 fix(handshake): enforce HandshakeTimeoutSec read deadline (pre-auth slowloris)
HandshakeTimeoutSec was defined but referenced nowhere and no SetReadDeadline existed, so a peer could stall the pre-auth handshake indefinitely (goroutine/FD exhaustion). Initiator.Run and Responder.Run now set a read deadline of HandshakeTimeoutSec when conn is a net.Conn, cleared on return; bare io.ReadWriter callers remain responsible for their own timeout.

Co-authored-by: Hanzo Dev <[email protected]>
2026-06-06 18:05:41 -07:00
..