EricssonResearch / EricssonResearch/bowser
Crash on DTLS resumed handshake
- Dominant language
- HTML
- Stars
- 208
- Forks
- 64
- PR merge metrics
- No merged PRs in 30d
Description
For DTLS-SRTP our implementation does a normal DTLS handshake on the RTP port. After that we start a resumed handshake on the RTCP port, in order to duplicate the same DTLS session to both ports. This is done to save CPU load on key exchange and certificate validation.
When sending a ClientHello with the SessionID from RTP to the RTCP port the browser crashes immediately.
Regards,
matt
Contributor guide
No contributing guide indexed for this repository
Research direction
No files, tests, or entry points are named. Start by reproducing the DTLS-SRTP flow: complete the RTP handshake, then send its SessionID in a ClientHello on RTCP; done means the browser no longer crashes during the resumed handshake.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- ios
- Domain
- audio-video-rtc, networking, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100