]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 717e707) | patch
QUIC: worker-bound stateless reset tokens.
authorRoman Arutyunyan <arut@nginx.com>
Thu, 26 Feb 2026 14:36:52 +0000 (18:36 +0400)
committerRoman Arutyunyan <arutyunyan.roman@gmail.com>
Fri, 27 Feb 2026 15:30:02 +0000 (19:30 +0400)
commitf72c7453f95143cd413dbc01d1ae9a28c67b39de
treeb675dd7a08c471eafbb56c2acbea6bb7c31887c3tree | snapshot
parent717e707488c10b9d41ffbd9d04f4f31d57b1f8abcommit | diff
QUIC: worker-bound stateless reset tokens.

Previously, it was possible to obtain a stateless reset token for a
connection by routing its packet to a wrong worker.  This allowed to
terminate the connection.

The fix is to bind stateless reset token to the worker number.
src/event/quic/ngx_event_quic_tokens.c diff | blob | history
nginx upstream