# HG changeset patch
# User Vladimir Homutov <vl@nginx.com>
# Date 1588238555 -10800
# Node ID 0aa6b02a15462d5920e01a0cbcba2ca10976a49b
# Parent  8712f45837833be47d143b02c5456ef1ccc3755e
Store clearflags in pkt->flags after decryption.

It doesn't make sense to store protected flags.

diff --git a/src/event/ngx_event_quic_protection.c b/src/event/ngx_event_quic_protection.c
--- a/src/event/ngx_event_quic_protection.c
+++ b/src/event/ngx_event_quic_protection.c
@@ -1015,6 +1015,7 @@ ngx_quic_decrypt(ngx_quic_header_t *pkt,
     pn = ngx_quic_parse_pn(&p, pnl, &mask[1], largest_pn);
 
     pkt->pn = pn;
+    pkt->flags = clearflags;
 
 #ifdef NGX_QUIC_DEBUG_CRYPTO
     ngx_quic_hexdump(pkt->log, "quic mask", mask, 5);