diff options
| author | Roman Arutyunyan <arut@nginx.com> | 2024-05-28 17:19:08 +0400 |
|---|---|---|
| committer | Roman Arutyunyan <arut@nginx.com> | 2024-05-28 17:19:08 +0400 |
| commit | 6f8c520f497edfe26f46ef6da6699174df5b3da4 (patch) | |
| tree | 59be73c67fe4f101a5fe48f7ccadbe0bdf9dbf8d /src/http/v3/ngx_http_v3_parse.c | |
| parent | cca5655dd9ba349817946a0db14f8b1f633f700a (diff) | |
| download | nginx-6f8c520f497edfe26f46ef6da6699174df5b3da4.tar.gz nginx-6f8c520f497edfe26f46ef6da6699174df5b3da4.zip | |
QUIC: ignore CRYPTO frames after handshake completion.
Sending handshake-level CRYPTO frames after the client's Finished message could
lead to memory disclosure and a potential segfault, if those frames are sent in
one packet with the Finished frame.
Diffstat (limited to 'src/http/v3/ngx_http_v3_parse.c')
0 files changed, 0 insertions, 0 deletions