Enforce maximum amount of bytes sent/received on meta-connections.

[oweals/tinc.git] / src / protocol_auth.c

diff --git a/src/protocol_auth.c b/src/protocol_auth.c
index 46b38eb8185924bdb0636e05d7fcd6c57c9d71f1..ddecbc62eb1f45170f69fa0581c435a45e7bf228 100644 (file)
--- a/src/protocol_auth.c
+++ b/src/protocol_auth.c
@@ -195,6 +195,7 @@ bool send_metakey(connection_t *c) {
                        return false;
                }
 
+               c->outbudget = (uint64_t)4 << EVP_CIPHER_key_length(c->outcipher);
                c->status.encryptout = true;
        }
 
@@ -273,6 +274,7 @@ bool metakey_h(connection_t *c) {
                        return false;
                }
 
+               c->inbudget = (uint64_t)4 << EVP_CIPHER_key_length(c->incipher);
                c->status.decryptin = true;
        } else {
                c->incipher = NULL;