HTTP/3: fixed CANCEL_PUSH handling.

diff --git a/src/http/v3/ngx_http_v3_uni.c b/src/http/v3/ngx_http_v3_uni.c
index f00caaad8919738d15efe909427cc4ed736c67e9..22ddaf3eba9bfd6da3f297ec037622b6e36fec85 100644 (file)
--- a/src/http/v3/ngx_http_v3_uni.c
+++ b/src/http/v3/ngx_http_v3_uni.c
@@ -747,7 +747,7 @@ ngx_http_v3_cancel_push(ngx_connection_t *c, uint64_t push_id)
 
     for (q = ngx_queue_head(&h3c->pushing);
          q != ngx_queue_sentinel(&h3c->pushing);
-         q = ngx_queue_next(&h3c->pushing))
+         q = ngx_queue_next(q))
     {
         push = (ngx_http_v3_push_t *) q;