# HG changeset patch
# User Vladimir Homutov <vl@nginx.com>
# Date 1592468195 -10800
# Node ID 4e75267865dedad653020d00b848248c2ae66cd0
# Parent  9fe7875ce4bb083865c6f2a6de27c451f35cf94d
QUIC: fixed off-by-one in frame range handler.

The ctx->pnum is incremented after the packet is sent, thus pointing to the
next packet number, which should not be used in comparison.

diff --git a/src/event/ngx_event_quic.c b/src/event/ngx_event_quic.c
--- a/src/event/ngx_event_quic.c
+++ b/src/event/ngx_event_quic.c
@@ -2262,7 +2262,7 @@ ngx_quic_handle_ack_frame_range(ngx_conn
 
     if (!found) {
 
-        if (max <= ctx->pnum) {
+        if (max < ctx->pnum) {
             /* duplicate ACK or ACK for non-ack-eliciting frame */
             return NGX_OK;
         }