Comments (9)
@amosyuen Has this issue been fixed for you?
We're using the Android Async library (upon which Ion is based) and many of our users are experiencing this crash on some of the newest versions of Google Play Services (I've only seen it on the beta versions myself).
Pardon my ignorance, but after a fair amount of searching it's not obvious to me if this is fixed and soon to be released as an update to the beta version or if this will remain as is and we'll need to bother the Android Async guys for an update (or do something ourselves...). If someone could please enlighten me and perhaps give a rough time estimation, that would be much appreciated!
from conscrypt.
@deanrobertcook unfortunately last I checked a couple of months ago, it seems the problem wasn't fixed. I'm not entirely sure if it's an Ion not using the new version or a continued conscrypt problem, but in the end our team decided to use a different library than Ion.
from conscrypt.
Yes, that seems like it should be checking against the result of SSLUtils.getEncryptedPacketLength(srcs, srcsOffset)
and not len
.
from conscrypt.
@nmittler could you take a look at this?
from conscrypt.
@kruton yup will look today.
from conscrypt.
@kruton I actually think what we want to do here is to only process a single packet, regardless of how much we receive in the source buffers.
So basically we only want to process SSLUtils.getEncryptedPacketLength(srcs, srcsOffset)
bytes at a time.
from conscrypt.
@amosyuen thanks! It's looking more like we might have to do the same. Which library are you using now? If you don't mind me asking.
from conscrypt.
We went with https://square.github.io/retrofit/
from conscrypt.
There was a further fix in #189.
from conscrypt.
Related Issues (20)
- Value of Public Exponent is longer than 5 bytes, Signature.isVerify will always return false. HOT 4
- are methods connect() and accept() asynchronous in conscrypt? HOT 1
- Certificate verify in conscrypt is not follow RFC2818 HOT 2
- Decrypt conscrypt code
- Additional secure PSK cipher suites
- Need help to understand this point of validating the trust. HOT 2
- signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x10000012c HOT 6
- Virtual thread pinning using Conscrypt with Socket APIs HOT 5
- jmigrate reports errors with org.conscrypt.Platform library HOT 1
- Remove sun.security.x509 dependency
- Can armeabi architecture be supported?
- May I ask how to build Android so files? HOT 2
- OpenSSLX509CRLEntry.hasUnsupportedCriticalExtension shouldn't call X509_supported_extensions HOT 2
- Sangat Berpuas Hati Dengan meneruskan, anda bersetuju Google menggunakan jawapan, maklumat akaun & sistem anda untuk meningkatkan perkhidmatan, mengikut Privasi & Syarat kami . HOT 1
- Native crash with latest BoringSSL HOT 8
- Recommended way to use Pre-Shared Key ?
- OkHttp Websocket connection failing few seconds after getting connected
- RSA "NoPadding" encryption is considered not secure but required by conscrypt to support TLS RSA-PSS signing algorithm HOT 8
- SSP... VLMC.Hammer HOT 2
- Compatibility Issue with GLIBC 2.12 on CentOS 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from conscrypt.