Skip to content

Only add packet to oNCP control queue with nc and pulse protocols

Corey Wright requested to merge coreywright/openconnect:fix_gp_and_oncp_control_queue into master

Don't add packets to the oNCP control queue if not using Juniper Network Connect or Pulse Connect Secure protocols otherwise a number of packets equal to the maximum queue length can be queued and disable reading from the TUN device for the duration of the VPN connection because the packets will never get dequeued except when using those two protocols.

Commit b4f50f8b broke OpenConnect transmitting across the GlobalProtect protocol with ESP packets when:

  1. The tun device has an IPv6 address (eg link local).
  2. IPv6 packets (eg router solicitation) are transmitted in quantity equal to maximum queue length.

Signed-off-by: Corey Wright cwright@digitalocean.com

Merge request reports