#1484 Websocket masks pong answer

Reporter lovetox
Owner Zash
Created
Updated
Stars ★ (1)
Tags
  • Priority-Medium
  • Type-Defect
  • Milestone-0.11
  • Status-Fixed
  • Compliance
  1. lovetox on

    Please provide a link to the specification: https://tools.ietf.org/html/rfc6455 There is nothing in this specs that says a server should mask anything This leads to connection abort with libsoup

  2. Zash on

    Thanks for the report. Problem seems to be that mod_websocket just returns the ping frame as is after changing opcode to pong, which preserves the mask flag.

    Changes
    • owner Zash
    • tags Milestone-0.11 Status-Started
  3. Zash on

    Fixed in https://hg.prosody.im/0.11/rev/10d6d0d91f4e despite being unable to reproduce the problem. The change doesn't appear to break anything tho and should be safe.

    Changes
    • tags Status-Fixed
  4. Zash on

    Reproduced with libsoup 2.68.2 in a Debian testing container.

New comment

Not published. Used for spam prevention and optional update notifications.