# HG changeset patch
# User Sergey Kandaurov <pluknet@nginx.com>
# Date 1583854818 -10800
# Node ID 9582adbc7d70e82fa92251ce500ca2b715994d80
# Parent  1297dc83a6b90fc2cc9e65e9938824a826f264a6
Fixed nonce in short packet protection.

diff --git a/src/event/ngx_event_quic.c b/src/event/ngx_event_quic.c
--- a/src/event/ngx_event_quic.c
+++ b/src/event/ngx_event_quic.c
@@ -758,7 +758,9 @@ ngx_quic_create_short_packet(ngx_connect
     }
 
     nonce = ngx_pstrdup(c->pool, &pkt->secret->iv);
-    if (pkt->level == ssl_encryption_handshake) {
+    if (pkt->level == ssl_encryption_handshake
+        || pkt->level == ssl_encryption_application)
+    {
         nonce[11] ^= (*pkt->number - 1);
     }