)]}'
{
  "commit": "74d5f02907b5231a56fdfe9915b6401eb1bf44eb",
  "tree": "927f3125f7c6cd26e0177b54cf024dd71a6a6cd5",
  "parents": [
    "4d75e276262927deb4ebf0df5bd1da03b57e6dcb"
  ],
  "author": {
    "name": "Victor Boivie",
    "email": "boivie@webrtc.org",
    "time": "Fri Jul 10 11:35:37 2026"
  },
  "committer": {
    "name": "webrtc-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "email": "webrtc-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Fri Jul 10 21:17:41 2026"
  },
  "message": "dcsctp: Limit the effect of state cookie tampering\n\nThis commit enhances the security and robustness of the state cookie by\nlimiting what an attacker can achieve even if they manage to forge or\ntamper with the cookie.\n\nBy storing the raw peer capabilities in the state cookie, we prevent an\nattacker from enabling extensions that the local socket didn\u0027t signal\nsupport for, limit the stream limits (incoming and outgoing) from what\nwas originally announced, and also eliminate some duplication in\ncapability parsing in the different methods to do connection handshakes.\n\nThis ensures that the state instantiated from a COOKIE ECHO strictly\nmatches the parameters of the original INIT, and if an attacker tampers\nwith it, the effects are very limited.\n\nBug: webrtc:522976080\nChange-Id: Ia038ce183cbc28301d26be4a5657c6867dbff306\nReviewed-on: https://webrtc-review.googlesource.com/c/src/+/488460\nCommit-Queue: Victor Boivie \u003cboivie@webrtc.org\u003e\nReviewed-by: Danil Chapovalov \u003cdanilchap@webrtc.org\u003e\nCr-Commit-Position: refs/heads/main@{#48182}\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9b1bff0a903988bb7fc8a591448028075ed48ab9",
      "old_mode": 33188,
      "old_path": "net/dcsctp/socket/capabilities.h",
      "new_id": "d667acbe5d53addc193b0dd490efd5e1f25998d5",
      "new_mode": 33188,
      "new_path": "net/dcsctp/socket/capabilities.h"
    },
    {
      "type": "modify",
      "old_id": "28495edb02c8887d08de75187ee49432bf75aa2d",
      "old_mode": 33188,
      "old_path": "net/dcsctp/socket/dcsctp_socket.cc",
      "new_id": "fa3d63fd772d4d9a5500b12b4338407a53f7319b",
      "new_mode": 33188,
      "new_path": "net/dcsctp/socket/dcsctp_socket.cc"
    },
    {
      "type": "modify",
      "old_id": "d5b05b5408497143bf071eb135d8185a6722e51e",
      "old_mode": 33188,
      "old_path": "net/dcsctp/socket/state_cookie.cc",
      "new_id": "5cf4563f0bc26d9dd1b301926a6b5a6893f6f184",
      "new_mode": 33188,
      "new_path": "net/dcsctp/socket/state_cookie.cc"
    },
    {
      "type": "modify",
      "old_id": "752f05157b5ae9378061d8afd0231590842f37ad",
      "old_mode": 33188,
      "old_path": "net/dcsctp/socket/state_cookie.h",
      "new_id": "ca4db1c0719eab3e162ad7bf68ff7a4b93d9d69f",
      "new_mode": 33188,
      "new_path": "net/dcsctp/socket/state_cookie.h"
    },
    {
      "type": "modify",
      "old_id": "8ab2da6b935e9102eecda662107a70d44aa035e2",
      "old_mode": 33188,
      "old_path": "net/dcsctp/socket/state_cookie_test.cc",
      "new_id": "98a776df2b236b4a18e0c802c7f5280b2a396379",
      "new_mode": 33188,
      "new_path": "net/dcsctp/socket/state_cookie_test.cc"
    },
    {
      "type": "modify",
      "old_id": "8c7adbb8e9628e4baa4bd11cc6f781bf57fdc5cb",
      "old_mode": 33188,
      "old_path": "net/dcsctp/socket/transmission_control_block.cc",
      "new_id": "bda99c507464c2aab16049f379d55f34075efd47",
      "new_mode": 33188,
      "new_path": "net/dcsctp/socket/transmission_control_block.cc"
    },
    {
      "type": "modify",
      "old_id": "3211acdb8b7a905b05219ac43449bafe4e57dbd7",
      "old_mode": 33188,
      "old_path": "net/dcsctp/socket/transmission_control_block.h",
      "new_id": "fa4920c391548ab962818a3f3a3a54dc28d135b3",
      "new_mode": 33188,
      "new_path": "net/dcsctp/socket/transmission_control_block.h"
    },
    {
      "type": "modify",
      "old_id": "070c38ed93a8680f0fcb3012176da4a76f10759b",
      "old_mode": 33188,
      "old_path": "net/dcsctp/socket/transmission_control_block_test.cc",
      "new_id": "68e1f48fd855c4ca544b157e6065e40072a538c6",
      "new_mode": 33188,
      "new_path": "net/dcsctp/socket/transmission_control_block_test.cc"
    }
  ]
}