]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7ac4e6b) | patch
QUIC: worker-bound stateless reset tokens.
authorRoman Arutyunyan <arut@nginx.com>
Thu, 26 Feb 2026 14:36:52 +0000 (18:36 +0400)
committerRoman Arutyunyan <arutyunyan.roman@gmail.com>
Tue, 24 Mar 2026 18:33:23 +0000 (22:33 +0400)
commit0fa49c5f7fa03c628c887fe69acbd7da0ec4e585
treedbde2acf52698609b7c03998273df40903420bc4tree | snapshot
parent7ac4e6b106ea926b57ccef1ec0fe2559dda7dc5ccommit | diff
QUIC: worker-bound stateless reset tokens.

Previously, it was possible to obtain a stateless reset token for a
connection by routing its packet to a wrong worker.  This allowed to
terminate the connection.

The fix is to bind stateless reset token to the worker number.
src/event/quic/ngx_event_quic_tokens.c diff | blob | history
nginx upstream