From 81207999eb9059f9f047d1fe676c7d6e66d316c8 Mon Sep 17 00:00:00 2001
From: orignal <i2porignal@yandex.ru>
Date: Thu, 31 Mar 2022 21:07:51 -0400
Subject: [PATCH] check token in SessionRequest

---
 libi2pd/SSU2.cpp | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/libi2pd/SSU2.cpp b/libi2pd/SSU2.cpp
index 67cf9658..efdd54bc 100644
--- a/libi2pd/SSU2.cpp
+++ b/libi2pd/SSU2.cpp
@@ -239,6 +239,14 @@ namespace transport
 		uint8_t headerX[48];
 		i2p::crypto::ChaCha20 (buf + 16, 48, i2p::context.GetSSU2IntroKey (), nonce, headerX);
 		memcpy (&m_DestConnID, headerX, 8); 
+		uint64_t token;
+		memcpy (&token, headerX + 8, 8);
+		if (!token || token != m_Server.GetIncomingToken (m_RemoteEndpoint))
+		{
+			LogPrint (eLogDebug, "SSU2: SessionRequest token mismatch. Retry");
+			SendRetry ();
+			return;
+		}	
 		// KDF for session request 
 		m_NoiseState->MixHash ( { {header.buf, 16}, {headerX, 16} } ); // h = SHA256(h || header) 
 		m_NoiseState->MixHash (headerX + 16, 32); // h = SHA256(h || aepk);