Issues · APN-Network/protos · GitHub

Labels Milestones New issue

Welcome.nid has no non-empty contract; unset APN_NID silently breaks the tunnel-header prefix invariant

#24

· bibonix opened

on Jun 16, 2026

Ping.canaries has no maximum-entry contract, enabling unbounded map allocation at the Node

#23

· bibonix opened

on Jun 13, 2026

Auth.hmac has no minimum-length contract; 12-byte enforcement left to each implementation

#21

· bibonix opened

on Jun 12, 2026

Peer.sni has no non-empty contract; empty sni causes a TLS handshake failure indistinguishable from a dead Node

#20

· bibonix opened

on Jun 11, 2026

Welcome.padding has no maximum-size contract, enabling post-auth memory exhaustion at the client

#19

· bibonix opened

on Jun 11, 2026

Auth.padding has no maximum-size contract, enabling pre-auth memory allocation at the Node

#18

· bibonix opened

on Jun 8, 2026

Welcome.ip and Welcome.home omit byte-order specification, unlike Peer.ip

#16

· bibonix opened

on Jun 3, 2026

Welcome.ip omits prefix length, making TUN interface configuration incomplete

#15

· bibonix opened

on Jun 3, 2026

Ping.canaries key format (dotted string) is incompatible with Peer.ip encoding (raw bytes), requiring an undocumented conversion

#14

· bibonix opened

on Jun 1, 2026

Auth.client_id has no length constraint; nine-byte identity contract is unenforced

#13

· bibonix opened

on Jun 1, 2026

Three inconsistent time units across proto files cause silent arithmetic errors

#12

· bibonix opened

on May 31, 2026

Auth.hmac omits byte-order for timestamp serialization, causing HMAC mismatch across implementations

#11

· bibonix opened

on May 31, 2026