Fix missing error return checks and comment typos

psiphon/common/inproxy/broker.go

@@ -349,6 +349,9 @@ func (b *Broker) HandleSessionPacket(
 	handleUnwrappedRequest := func(initiatorID ID, unwrappedRequestPayload []byte) ([]byte, error) {
 
 		recordType, err := peekRecordPreambleType(unwrappedRequestPayload)
+		if err != nil {
+			return nil, errors.Trace(err)
+		}
 
 		var responsePayload []byte
 

psiphon/common/inproxy/webrtc.go

@@ -1620,7 +1620,10 @@ func processSDPAddresses(
 		if err != nil {
 			return nil, nil, errors.Trace(err)
 		}
-		port, _ := strconv.Atoi(portStr)
+		port, err := strconv.Atoi(portStr)
+		if err != nil {
+			return nil, nil, errors.Trace(err)
+		}
 
 		// Only IPv4 port mapping addresses are supported due to the
 		// NewCandidateHost limitation noted below. It is expected that port
@@ -1735,7 +1738,7 @@ func processSDPAddresses(
 				// network addresses misuse non-private IP ranges (so are
 				// technically not bogons). Instead of outright rejecting
 				// SDPs containing unexpected GeoIP candidates, they are
-				// instead stripped out and the the resulting filtered SDP is
+				// instead stripped out and the resulting filtered SDP is
 				// used.
 
 				if lookupGeoIP != nil {

psiphon/meekConn.go

@@ -100,7 +100,7 @@ type MeekConfig struct {
 	// HTTP level; TLS and server certificate verification is required; the
 	// origin server may be any HTTP(S) server.
 	//
-	// MeekModeWrappedPlaintextRoundTrip: is equivilent to
+	// MeekModeWrappedPlaintextRoundTrip: is equivalent to
 	// MeekModePlaintextRoundTrip, except skipping of server certificate
 	// verification is permitted. In this mode, the caller is asserting that
 	// the HTTP plaintext payload is wrapped in its own transport security