From bedf64c8d3097aa78f7c94f26fb432619ae4d053 Mon Sep 17 00:00:00 2001 From: rustdesk Date: Thu, 17 Sep 2026 12:00:37 +0800 Subject: [PATCH] bump hbb_common: cap the message an unauthenticated peer can make us hold Carries `Stream::set_max_packet_length` to all three transports, so a connection can hold its peer to a small message until it has authenticated: TCP had the knob, WebRTC's reassembly ceiling becomes a per-stream bound, and WebSocket reaches tungstenite's config through a fork of v0.26.2 that exposes `set_config`, which upstream still does not at 0.30.0. Nothing calls it yet, so this changes no behaviour; the hook lands separately. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01EZ49AbZJYfm8NTp5yDPMab --- Cargo.lock | 3 +-- libs/hbb_common | 2 +- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 09ca9b738..e0f467ccc 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -8609,8 +8609,7 @@ dependencies = [ [[package]] name = "tokio-tungstenite" version = "0.26.2" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7a9daff607c6d2bf6c16fd681ccb7eecc83e4e2cdc1ca067ffaadfca5de7f084" +source = "git+https://github.com/rustdesk-org/tokio-tungstenite?rev=9c320de8e7c546cb654b017b7f4cbb4a5cc09cd9#9c320de8e7c546cb654b017b7f4cbb4a5cc09cd9" dependencies = [ "futures-util", "log", diff --git a/libs/hbb_common b/libs/hbb_common index daf84c2df..68dcbe6ad 160000 --- a/libs/hbb_common +++ b/libs/hbb_common @@ -1 +1 @@ -Subproject commit daf84c2df33b3d5861d9a36600773638559d072c +Subproject commit 68dcbe6adc28e35f413e8783850b1abe35bf039f