mirror of
https://github.com/amnezia-vpn/amneziawg-go.git
synced 2026-05-26 13:50:38 +00:00
f4f4c99926
Keepalive packets were excluded from S4 padding because the padding logic was nested inside the dataSent guard. The receiving side (DeterminePacketTypeAndPadding) expects S4 padding on all transport packets, so unpadded keepalives fail H4 header validation and are silently dropped. This prevents the responder from completing key confirmation — lastHandshakeNano stays 0 until real data flows through the tunnel.