changeset 8320:6e1213ef469a quic

Rejecting new connections with non-zero Initial packet.
author Sergey Kandaurov <pluknet@nginx.com>
date Mon, 06 Apr 2020 14:54:10 +0300
parents 29354c6fc5f2
children e45719a9b148
files src/event/ngx_event_quic.c
diffstat 1 files changed, 6 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/src/event/ngx_event_quic.c	Mon Apr 06 14:54:08 2020 +0300
+++ b/src/event/ngx_event_quic.c	Mon Apr 06 14:54:10 2020 +0300
@@ -531,6 +531,12 @@
         return NGX_ERROR;
     }
 
+    if (pkt->pn != 0) {
+        ngx_log_error(NGX_LOG_INFO, c->log, 0,
+                      "invalid initial packet number %L", pkt->pn);
+        return NGX_ERROR;
+    }
+
     if (ngx_quic_init_connection(c) != NGX_OK) {
         return NGX_ERROR;
     }