Mercurial > hg > nginx

diff src/event/quic/ngx_event_quic_transport.c @ 8757:dcc57827098d quic

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
QUIC: fixed parsing of unknown frame types. The ngx_quic_frame_allowed() function only expects known frame types.
author Vladimir Homutov <vl@nginx.com>
date Mon, 19 Apr 2021 11:36:41 +0300
parents b4e6b7049984
children 17492dfd4744
line wrap: on
line diff
--- a/src/event/quic/ngx_event_quic_transport.c
+++ b/src/event/quic/ngx_event_quic_transport.c
@@ -742,6 +742,13 @@ ngx_quic_parse_frame(ngx_quic_header_t *
         return NGX_ERROR;
     }
 
+    if (varint > NGX_QUIC_FT_LAST) {
+        pkt->error = NGX_QUIC_ERR_FRAME_ENCODING_ERROR;
+        ngx_log_error(NGX_LOG_INFO, pkt->log, 0,
+                      "quic unknown frame type 0x%xL", varint);
+        return NGX_ERROR;
+    }
+
     f->type = varint;
 
     if (ngx_quic_frame_allowed(pkt, f->type) != NGX_OK) {