Mercurial > hg > nginx-quic
changeset 7922:d437ee1ce81e quic
Reject invalid STREAM ID with STREAM_STATE_ERROR connection error.
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Fri, 05 Jun 2020 20:59:26 +0300 |
parents | 6ea2f1daedb5 |
children | 953cf44708b0 |
files | src/event/ngx_event_quic.c |
diffstat | 1 files changed, 12 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- a/src/event/ngx_event_quic.c +++ b/src/event/ngx_event_quic.c @@ -2598,12 +2598,24 @@ ngx_quic_handle_stream_frame(ngx_connect qc = c->quic; f = &frame->u.stream; + if ((f->stream_id & NGX_QUIC_STREAM_UNIDIRECTIONAL) + && (f->stream_id & NGX_QUIC_STREAM_SERVER_INITIATED)) + { + qc->error = NGX_QUIC_ERR_STREAM_STATE_ERROR; + return NGX_ERROR; + } + sn = ngx_quic_find_stream(&qc->streams.tree, f->stream_id); if (sn == NULL) { ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0, "quic stream id 0x%xi is new", f->stream_id); + if (f->stream_id & NGX_QUIC_STREAM_SERVER_INITIATED) { + qc->error = NGX_QUIC_ERR_STREAM_STATE_ERROR; + return NGX_ERROR; + } + n = (f->stream_id & NGX_QUIC_STREAM_UNIDIRECTIONAL) ? qc->tp.initial_max_stream_data_uni : qc->tp.initial_max_stream_data_bidi_remote;