copilot-swe-agent[bot] 7d70aefa5f Fix Vision SSL errors by not reading encrypted rawInput buffer ...

The issue occurs when switching to direct copy mode - Vision was incorrectly reading from rawInput buffer which contains ENCRYPTED outer TLS/Reality records and merging them with decrypted application data. This caused SSL protocol errors, especially with testpre where pre-established connections may have TLS session tickets or other post-handshake messages in rawInput.

The fix: Only read from input buffer (decrypted application data), skip rawInput (encrypted TLS records).

Fixes #4878

Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

2026-01-11 01:05:15 +00:00

..

blackhole

Chore: Run gofmt (#3990)

2024-11-09 11:16:11 +00:00

dns

DNS outbound: Fix some issues (#5081)

2025-09-05 08:15:16 +00:00

dokodemo

Tunnel/Dokodemo: Fix stats conn unwrap (#5440)

2025-12-23 09:44:54 +00:00

freedom

proxy/proxy.go: IsRAWTransport() -> IsRAWTransportWithoutSecurity()

2025-09-02 18:15:08 +00:00

http

Tunnel/Dokodemo: Fix stats conn unwrap (#5440)

2025-12-23 09:44:54 +00:00

loopback

Chore: Generate *.pb.go files with protoc v5.28.2

2024-10-16 04:06:21 +00:00

shadowsocks

Outbound: One endpoint and at most one user only (#5144)

2025-09-15 13:31:27 +00:00

shadowsocks_2022

Chore: Run gofmt (#3990)

2024-11-09 11:16:11 +00:00

socks

Socks: Fix buffer full panic when encoding large UDP packets (#5252)

2025-11-20 12:21:22 +00:00

trojan

Tunnel/Dokodemo: Fix stats conn unwrap (#5440)

2025-12-23 09:44:54 +00:00

tun

Proxy: Add TUN inbound for Windows & Linux, including Android (#5464)

2026-01-07 22:05:08 +00:00

vless

Remove redundant stats in mux and bridge dispatcher (#5466)

2025-12-31 11:00:45 +00:00

vmess

Tunnel/Dokodemo: Fix stats conn unwrap (#5440)

2025-12-23 09:44:54 +00:00

wireguard

Wireguard: Decouple server endpoint DNS from address option (#5417)

2025-12-14 10:13:47 -05:00

proxy.go

Fix Vision SSL errors by not reading encrypted rawInput buffer

2026-01-11 01:05:15 +00:00