Edge sending STUN packets with wrong USERNAME attribute length

Duplicate Issue #16176672 • See Issue #16176684

Details

Author
Grant B.
Created
Mar 1, 2018
Privacy
This issue is public.
Duplicates
See progress on Bug #16176684
Reports
Reported by 1 person

Sign in to watch or report this issue.

Steps to reproduce

Edge 41.16299.248.0 is specifying the padded length of the USERNAME attribute, which is incorrect. RFC5389 states…

The value in the length field MUST contain the length of the Value part of the attribute, prior to padding, measured in bytes.

Here is a dump of the packet with the issue. The USERNAME attribute length is specified at 0x18 (24), but that is incorrect because it is including the 3 padding bytes.

0000    00 01 00 58 21 12 a4 42  b5 5e f1 bd 3a d2 d0 b6   ...X!..B.^..:...
0010    da 9a c4 38 00 06 00 18  61 73 4f 36 70 43 4c 79   ...8....asO6pCLy
0020    64 6e 35 71 47 36 32 2b  3a 31 72 4a 68 00 00 00   dn5qG62+:1rJh...
0030    00 24 00 04 6e ff fe ff  80 2a 00 08 00 00 00 00   .$..n....*......
0040    1a d7 42 d8 80 54 00 04  31 00 00 00 80 70 00 04   ..B..T..1....p..
0050    00 00 00 03 00 08 00 14  c0 f2 d7 36 30 5d 77 57   ...........60]wW
0060    48 9b 1a 95 d7 f0 de 0f  35 3f 0c de 80 28 00 04   H.......5?...(..
0070    1b a5 1d 13                                        ....

Attachments

0 attachments

    Comments and activity

    • Microsoft Edge Team

      Changed Status to “Duplicate”

    • This bug has marked as duplicate. Please follow the parent issue to get new updates.

    • Hello,

      Thank you for providing this information about the issue. We will investigate and address this in case 16176684.

      Best Wishes,
      The MS Edge Team

    You need to sign in to your Microsoft account to add a comment.

    Sign in