Mercurial > hg > nginx
view src/event/quic/ngx_event_quic_output.h @ 9141:5d1e7c74aadf
QUIC: avoid accessing freed frame.
Previously the field pnum of a potentially freed frame was accessed. Now the
value is copied to a local variable. The old behavior did not cause any
problems since the frame memory is not freed, but is moved to a free queue
instead.
author | Roman Arutyunyan <arut@nginx.com> |
---|---|
date | Tue, 01 Aug 2023 11:20:04 +0400 |
parents | 501f28679d56 |
children | 58afcd72446f |
line wrap: on
line source
/* * Copyright (C) Nginx, Inc. */ #ifndef _NGX_EVENT_QUIC_OUTPUT_H_INCLUDED_ #define _NGX_EVENT_QUIC_OUTPUT_H_INCLUDED_ #include <ngx_config.h> #include <ngx_core.h> size_t ngx_quic_max_udp_payload(ngx_connection_t *c); ngx_int_t ngx_quic_output(ngx_connection_t *c); ngx_int_t ngx_quic_negotiate_version(ngx_connection_t *c, ngx_quic_header_t *inpkt); ngx_int_t ngx_quic_send_stateless_reset(ngx_connection_t *c, ngx_quic_conf_t *conf, ngx_quic_header_t *pkt); ngx_int_t ngx_quic_send_cc(ngx_connection_t *c); ngx_int_t ngx_quic_send_early_cc(ngx_connection_t *c, ngx_quic_header_t *inpkt, ngx_uint_t err, const char *reason); ngx_int_t ngx_quic_send_retry(ngx_connection_t *c, ngx_quic_conf_t *conf, ngx_quic_header_t *pkt); ngx_int_t ngx_quic_send_new_token(ngx_connection_t *c, ngx_quic_path_t *path); ngx_int_t ngx_quic_send_ack(ngx_connection_t *c, ngx_quic_send_ctx_t *ctx); ngx_int_t ngx_quic_send_ack_range(ngx_connection_t *c, ngx_quic_send_ctx_t *ctx, uint64_t smallest, uint64_t largest); ngx_int_t ngx_quic_frame_sendto(ngx_connection_t *c, ngx_quic_frame_t *frame, size_t min, ngx_quic_path_t *path); #endif /* _NGX_EVENT_QUIC_OUTPUT_H_INCLUDED_ */