ginuerzh a939758583 fix(tun): survive oversized packets without panic or stream teardown ...

A 20546-byte spoke datagram hit wbuf[:writeOffset+len(p)] (cap 16400)
and panicked the whole hub process. Three parts:

- tunDevice.Write rejects packets bigger than its buffers with the new
  exported ErrPacketTooLarge instead of reslicing past the end. The
  kernel would have refused the write anyway (tun MTU 1420), so nothing
  deliverable is lost.
- Buffers follow the device MTU (max 16KB): newTunDevice(ifce, mtu),
  so raising tun.mtu for legitimate jumbo UDP automatically makes such
  packets writable. The relay/KCP/stream path already passes 64KB.
- fromSpoke drops an oversized datagram with a windowed count and
  keeps the peer stream up; only a real device failure still tears
  the stream down.

Tests: tun write guard, normal passthrough, large-MTU accept, and
stream survival with rate-limited warnings; all written first and
watched fail.

2026-10-07 01:19:06 +00:00

..

api

fix(handler/api): add nil guard, propagate Shutdown error, doc comments, 20 tests

2026-05-26 20:44:23 +08:00

auto

fix(handler/auto): sniff SOCKS4/SOCKS5 with 1-byte peek before 5-byte Sniff()

2026-06-26 20:17:49 +08:00

dns

feat(dns): use system nameservers from /etc/resolv.conf as fallback

2026-06-20 15:54:39 +08:00

file

fix(listener/tap): support custom TAP adapter name on Windows (issue #772)

2026-06-08 20:05:57 +08:00

forward

fix(tunnel, forward): route tunneled hostname through hop filter.host

2026-08-26 20:28:37 +08:00

http

refactor(handler/http): drop govalidator dep, inline DNS name check

2026-09-02 17:01:58 +08:00

http2

fix: add status field to service list/detail APIs, unify observeStats retry pattern, fix router bugs

2026-06-03 22:12:08 +08:00

http3

add service option for plugin

2025-08-29 23:36:31 +08:00

masque

fix(masque): reap idle CONNECT-UDP associations

2026-09-11 21:40:12 +08:00

metrics

fix(metrics): add cross-platform process metrics collector for non-Linux systems

2026-06-21 21:55:27 +08:00

redirect

fix(redirect): skip pre-sniffing IP bypass check in whitelist mode

2026-08-31 21:45:28 +08:00

relay

refactor(sniffing): register protocol handlers via init() registries

2026-08-25 21:35:45 +08:00

router

fix(handler/router): 3 bugs fixed + comprehensive data-flow documentation

2026-06-05 20:46:00 +08:00

serial

fix(handler/serial,sni): 5 code-review fixes - xnet.Pipe errors, (nil,nil) warning, readTimeout comment, defer deadline, clean close

2026-06-05 21:09:10 +08:00

sni

fix(handler/sni): clear sniffing read deadline before the data path

2026-09-12 10:23:53 +08:00

socks

feat(socks5): add optional UDP device binding (#127)

2026-09-12 10:37:46 +08:00

ss

fix: prevent double-recording when HTTP response cache is enabled

2026-07-26 20:11:36 +08:00

sshd

fix(sniffing): pass bypass option to sniffer HandleHTTP/HandleTLS calls

2026-06-23 20:54:26 +08:00

tap

refactor(ss,tap): migrate tap off upstream go-shadowsocks2 onto the fork

2026-09-02 17:42:09 +08:00

tun

fix(tun): survive oversized packets without panic or stream teardown

2026-10-07 01:19:06 +00:00

tungo

fix: add status field to service list/detail APIs, unify observeStats retry pattern, fix router bugs

2026-06-03 22:12:08 +08:00

tunnel

x: wire MetadataFeature (relay v0.7.0) for tunnel recording mode negotiation

2026-07-24 22:19:41 +08:00

unix

fix: prevent double-recording when HTTP response cache is enabled

2026-07-26 20:11:36 +08:00