Enforce maximum amount of bytes sent/received on meta-connections.

[tinc] / src / protocol_auth.c

diff --git a/src/protocol_auth.c b/src/protocol_auth.c
index 46b38eb..ddecbc6 100644 (file)
--- a/src/protocol_auth.c
+++ b/src/protocol_auth.c
@@ -195,6 +195,7 @@ bool send_metakey(connection_t *c) {
                        return false;
                }
 
+               c->outbudget = (uint64_t)4 << EVP_CIPHER_key_length(c->outcipher);
                c->status.encryptout = true;
        }
 
@@ -273,6 +274,7 @@ bool metakey_h(connection_t *c) {
                        return false;
                }
 
+               c->inbudget = (uint64_t)4 << EVP_CIPHER_key_length(c->incipher);
                c->status.decryptin = true;
        } else {
                c->incipher = NULL;