diff options
| author | Sergey Kandaurov <pluknet@nginx.com> | 2020-04-06 14:54:10 +0300 |
|---|---|---|
| committer | Sergey Kandaurov <pluknet@nginx.com> | 2020-04-06 14:54:10 +0300 |
| commit | cc704a8c319130687285a49c53f263a1fe880943 (patch) | |
| tree | 60a5988d9755ced190a19f08e671cd086f20e61c /src | |
| parent | 1381982aaa600e2ce501dc22a273d5ae11f93de9 (diff) | |
| download | nginx-cc704a8c319130687285a49c53f263a1fe880943.tar.gz nginx-cc704a8c319130687285a49c53f263a1fe880943.zip | |
Rejecting new connections with non-zero Initial packet.
Diffstat (limited to 'src')
| -rw-r--r-- | src/event/ngx_event_quic.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/event/ngx_event_quic.c b/src/event/ngx_event_quic.c index ebb9b24af..b96af808d 100644 --- a/src/event/ngx_event_quic.c +++ b/src/event/ngx_event_quic.c @@ -531,6 +531,12 @@ ngx_quic_new_connection(ngx_connection_t *c, ngx_ssl_t *ssl, ngx_quic_tp_t *tp, return NGX_ERROR; } + if (pkt->pn != 0) { + ngx_log_error(NGX_LOG_INFO, c->log, 0, + "invalid initial packet number %L", pkt->pn); + return NGX_ERROR; + } + if (ngx_quic_init_connection(c) != NGX_OK) { return NGX_ERROR; } |