Viktor Liu 7099f5907b Do not misroute WireGuard packets to the STUN handler ...

stun.IsMessage only checks the magic cookie, which overlaps the WireGuard receiver index. A session whose index equals the cookie had every inbound packet consumed by the STUN handler until the next rekey. Reject WireGuard-shaped packets before the cookie check and classify on the received length instead of the buffer capacity.

2026-08-04 14:32:15 +02:00

..

android

[client, android] Reuse the profile's account for Android SSO logins (#6988)

2026-08-03 22:50:57 +02:00

anonymize

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

cmd

[client] Restrict debug bundle log path and upload destinations (#6975)

2026-07-31 19:12:56 +02:00

configs

[client] Restrict debug bundle log path and upload destinations (#6975)

2026-07-31 19:12:56 +02:00

embed

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

errors

[client] Fix error count formatting (#2641)

2024-09-24 20:57:56 +02:00

firewall

[client] Fix expression order in legacy nftables route rules (#7011)

2026-07-31 16:28:42 +02:00

grpc

[client] Add env var for management gRPC max receive message size (#5622)

2026-03-19 17:33:50 +01:00

iface

Do not misroute WireGuard packets to the STUN handler

2026-08-04 14:32:15 +02:00

internal

[client, android] Pull fresh TUN settings on Android rebuild (#6991)

2026-08-03 18:23:02 +02:00

ios/NetBirdSDK

[client] iOS - Remove duplicate Login RPCs from the iOS SDK (#6931)

2026-08-02 09:51:14 +02:00

jobexec

[client] Restrict debug bundle log path and upload destinations (#6975)

2026-07-31 19:12:56 +02:00

mdm

[client] Enable launch-on-login by default on fresh GUI installs (#6738)

2026-07-13 13:39:57 +02:00

net

[client] Replace exclusion routes with scoped default + IP_BOUND_IF on macOS (#5918)

2026-04-20 10:01:01 +02:00

proto

[client] Restrict debug bundle log path and upload destinations (#6975)

2026-07-31 19:12:56 +02:00

server

[client] Don't ask for an SSO login when the login never reached management (#6983)

2026-08-03 16:28:51 +02:00

ssh

[client] Authorize daemon IPC callers by their local identity (#6967)

2026-07-29 20:32:26 +02:00

status

[client] Include system events in ToProtoFullStatus conversion (#6746)

2026-07-13 18:49:17 +02:00

system

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

test

[client] add json gateway for netbird daemon (#6272)

2026-07-07 16:58:48 +02:00

testdata

[management] Move testdata to sql files (#2693)

2024-10-10 12:35:03 +02:00

testutil/privileged

[client] Categorize privileged tests behind a build tag and run them in Docker (#6425)

2026-06-28 16:15:54 +02:00

ui

[client] launch macOS GUI as the logged-in user after install/update (#6962)

2026-08-03 16:28:10 +02:00

wasm

[client] Fix js relay WebSocket close, raise RDP dial timeout, adjust WASM log levels (#6684)

2026-07-09 13:21:08 +02:00

Dockerfile

[misc] improve goreleaser with RC handling and update docker builds (#6438)

2026-06-17 20:13:13 +02:00

Dockerfile-rootless

[misc] improve goreleaser with RC handling and update docker builds (#6438)

2026-06-17 20:13:13 +02:00

installer.nsis

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

main.go

Clarify XORMapped panic case (#877)

2023-05-18 19:47:36 +02:00

manifest.xml

Renaming project builds and including new Icons (#318)

2022-05-21 18:42:56 +02:00

netbird-entrypoint.sh

[client] Simplify entrypoint by running netbird up unconditionally (#5652)

2026-03-23 09:39:32 +01:00

netbird.wxs

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

resources.rc

[client] UI Refactor Icon Paths (#3420)

2025-03-04 18:29:29 +03:00