Files
Antje WorringandHanzo Dev 9b69731086 fix(handshake): enforce HandshakeTimeoutSec read deadline (pre-auth slowloris)
HandshakeTimeoutSec was defined but referenced nowhere and no SetReadDeadline existed, so a peer could stall the pre-auth handshake indefinitely (goroutine/FD exhaustion). Initiator.Run and Responder.Run now set a read deadline of HandshakeTimeoutSec when conn is a net.Conn, cleared on return; bare io.ReadWriter callers remain responsible for their own timeout.

Co-authored-by: Hanzo Dev <dev@hanzo.ai>
2026-06-06 18:05:41 -07:00
..