Data channel message integrity violation
lgrahl opened this issue · comments
Due to a bug in libwebrtc, partial chunks may be handed out from the data channel which will lead to messages never being reassembled entirely. This can lead to all sorts of failures and misbehaviour of the web client.
The problem is quite diverse. It affects both the app (a bugfix is planned to be released) and, more importantly, all Chrome browser versions. I'm currently investigating whether we can somehow mitigate this.
The fix of the native code is here: threema-ch/webrtc-build-docker#19
A bugfix release of the Threema app will be released shortly. As it turns out, the app always sends in 64 KiB chunks which seems to not be affected by this bug, so there's nothing else we need to do here.