Windscribe VPN MTE Bug

DeletedUser235

"Is the only WireGuard-based VPN we're aware of that has done significant work to fix the issues".

Does someone know if Windscribe has MTE bugs on Pixel 8 or 9 series ?

ignoramous

DeletedUser235 The bug (only one found thus far?) Mullvad fixed was in the runtime (Go) and likely every single WireGuard app using WireGuard's official userspace implementation (which is in Go) will crash if MTE is enabled.

Windscribe, it seems like, uses Cloudflare's WireGuard implementation written in Rust (not the official one written in Go), so they must be good (but that's no guarantee that MTE isn't going to catch memory bugs elsewhere).

See: https://github.com/golang/go/issues/59090

SovereignCopper

ignoramous I guess they do use WireGuard's Go implementation? https://github.com/Windscribe/Android-App/tree/main/wgtunnel/src/main/java/com/wireguard/android/backend / https://github.com/Windscribe/Android-App/tree/main/wgtunnel/tools/libwg-go

ignoramous

SovereignCopper they do use WireGuard's Go implementation

Ah, nice catch. Like us, they're toast (:

SovereignCopper

If the issue is (issues are) found in the WireGuard library and Mullvad fixed it, hasn't this been offered upstream?

ignoramous

SovereignCopper Mullvad fixed it, hasn't this been offered upstream

Don't think so. Ideally, Go makes its runtime MTE compliant. Though, from discussions on GitHub, it looks like it won't be easy nor quick.