diff options
| author |   Simon Rozman <simon.rozman@amebis.si> | 2026-02-19 20:32:54 +0100 |
|---|---|---|
| committer | Simon Rozman <simon.rozman@amebis.si> | 2026-02-20 14:30:57 +0100 |
| commit | dd050927f42081dce7c2ae262be55ffd8210c11a (patch) | |
| tree | 52a2a54318965d191f406e1fe61dcb4d88c7318c /example | |
| parent | driver: explicitly terminate NBL (diff) | |
| download | wintun-master.tar.xz wintun-master.zip | |
This PR fixes a critical race condition in the Wintun driver that causes
ring buffer overruns when multiple UDP senders operate in parallel. The
issue occurred because multiple threads could read the same Ring->Head
value without synchronization, leading to concurrent modifications that
corrupted the ring buffer and resulted in ERROR_INVALID_DATA errors.
In order to prevent buffer overrun (which was observed while sending
multiple high throughput UDP streams from different threads) I move the
driver spinlock to protect Ring buffer Head.
I observed that the Ring->Head was taken and manipulated later on with
just a `ReadULongAcquire` which isn't OK when 2 are trying to manipulate
it later on based on the same received value.
A fix was provided in 4fc590853b8281552631b79dacda484a5782f3bf, but it
didn't solve the issue.
Reported-by: odedkatz <katz.oded@gmail.com>
Reference: https://lists.zx2c4.com/pipermail/wireguard/2026-February/009489.html
Reference: https://lists.zx2c4.com/pipermail/wireguard/2026-February/009510.html
Signed-off-by: Simon Rozman <simon.rozman@amebis.si>
Diffstat (limited to 'example')
0 files changed, 0 insertions, 0 deletions