quinn-proto

This release fixes three remote memory exhaustion issues. See GHSA-qfwj-vfxf-92j2, GHSA-2hv7-gw8g-gpq5, and GHSA-hmxj-32vh-65vr for more details, and #2789 for the fixes.

What's Changed

• fix(ci): fix clippy lints by @LesnyRumcajs in #2752
• congestion: saturate CUBIC window increment to avoid overflow by @LesnyRumcajs in #2751
• 0.11.x: Backport memory use fixes and prepare release by @Ralith in #2790

Full Changelog: quinn-proto-0.11.16...quinn-proto-0.11.17

What's Changed

• 0.11.x: upgrade dependencies by @djc in #2707

This release fixes a remote memory exhaustion issue in the quinn-proto Assembler. See GHSA-4w2j-m93h-cj5j for more details and #2694 for the fix.

Two sponsoring organizations participated in coordinated disclosure. If this is relevant to your organization, please contact us to keep support Quinn maintenance.

What's Changed

• Prepare 0.11.x branch for release by @djc in #2645
• Backport of #2495 to 0.11.x by @stablebits in #2674
• 0.11.x backport | quinn-proto: drop Initials silently when saturated by @stablebits in #2688
• Backport #2677 to 0.11.x by @syszery in #2690
• congestion: avoid double-reducing CUBIC fast convergence (0.11.x) by @0xdeafbeef in #2641
• proto: yield error on too many gaps in assembler by @djc in #2694

@jxs reported a denial of service issue in quinn-proto 5 days ago:

• GHSA-6xvm-j4wr-6v98

We coordinated with them to release this version to patch the issue. Unfortunately the maintainers missed these issues during code review and we did not have enough fuzzing coverage -- we regret the oversight and have added an additional fuzzing target.

Organizations that want to participate in coordinated disclosure can contact us privately to discuss terms.

What's Changed

• Fix over-permissive proto dependency edge by @Ralith in #2385
• 0.11.x: avoid unwrapping VarInt decoding during parameter parsing by @djc in #2559

What's Changed

• quinn: Remove explicit write future structs by @gretchenfrage in #2226
• proto: Make BytesSource private by @gretchenfrage in #2233
• feat: Make the future returned by SendStream::stopped static by @Frando in #2220
• refactor(quinn): Remove some usage of execute_poll by @gretchenfrage in #2232
• Fix false positive GSO detection by @inetic in #2248
• expose Connection::side() in quinn by @abonander in #2261
• refactor(quinn): Configure out async_io::UdpSocket when unused by @matheus23 in #2264
• proto: upgrade to rustls-platform-verifier 0.6 by @djc in #2276
• Don't violate client CID limits when advertising a preferred address by @Ralith in #2282
• Various enhancement to quinn perf by @stormshield-damiend in #2279
• Updated quinn::Connection::send_datagram() docs by @gry8t in #2284
• Collect qlog recovery metrics by @stormshield-fabs in #2278
• proto: Add option to pad all application data packets to MTU by @FlorianUekermann in #2274
• Update to socket2 v0.6 by @Thomasdezeeuw in #2291
• Upgrade to fastbloom 0.12 by @djc in #2290
• Fix flaky key update test by @Ralith in #2292
• chore(Cargo.toml): support both socket2 v0.5 and v0.6 by @mxinden in #2294
• Tiny clean up of a comment that was in the wrong place by @flub in #2306
• Do not track lost_packets twice by @flub in #2308
• proto: fix NewConnectionId size bound by @djc in #2311
• Configure qlog in TransportConfig by @Ralith in #2305
• Wake endpoint driver on rebind by @Ralith in #2325
• Check for in-flight data on-demand by @Ralith in #2326
• Fix in-flight byte count underflow by @Ralith in #2319
• build(deps): bump criterion from 0.6.0 to 0.7.0 by @dependabot[bot] in #2330
• build(deps): bump windows-sys from 0.59.0 to 0.60.2 by @dependabot[bot] in #2332
• docs(quinn): Revise SendStream::write docs by @gretchenfrage in #2227
• Improve quinn::ConnectionStats docs by @gry8t in #2340
• Various enhancement for perf binaries by @stormshield-damiend in #2342
• Perf/Bench enhancement by @stormshield-damiend in #2352
• feat: add Connection::set_send_window() by @abonander in #2268
• perf: add max udp payload size option by @Dreamacro in #2343
• perf: move client and server on one binary by @Dreamacro in #2354
• perf: rename perf binary to quinn-perf to prevent name clash with linux perf by @stormshield-damiend in #2360
• Ignore async-std advisory for now by @djc in #2362
• Upgrade to fastbloom 0.14 by @djc in #2363
• Catch EOPNOTSUPP for opportunistic socket flags by @gongy in #2273

What's Changed

• fix: reuse existing socket for probing GRO/GSO support by @thomaseizinger in #2565
• refactor(quinn-udp): add retry_if_interrupted helper by @larseggert in #2583
• fix(unix): disable GSO after probing by @thomaseizinger in #2584
• fix: Resolve sendmsg_x/recvmsg_x via dlsym by @larseggert in #2571
• chore: bump quinn-udp to 0.6.1 by @larseggert in #2586