# HG changeset patch
# User Sergey Kandaurov <pluknet@nginx.com>
# Date 1591352402 -10800
# Node ID c70446e3d7713423f7a2338ae2b273e00b63141e
# Parent  833898b35b241de0e645da6964a50596af9e67bb
Treat receipt of NEW_TOKEN as connection error PROTOCOL_VIOLATION.

diff --git a/src/event/ngx_event_quic.c b/src/event/ngx_event_quic.c
--- a/src/event/ngx_event_quic.c
+++ b/src/event/ngx_event_quic.c
@@ -1948,7 +1948,6 @@ ngx_quic_payload_handler(ngx_connection_
 
         case NGX_QUIC_FT_NEW_CONNECTION_ID:
         case NGX_QUIC_FT_RETIRE_CONNECTION_ID:
-        case NGX_QUIC_FT_NEW_TOKEN:
         case NGX_QUIC_FT_RESET_STREAM:
         case NGX_QUIC_FT_STOP_SENDING:
         case NGX_QUIC_FT_PATH_CHALLENGE:
diff --git a/src/event/ngx_event_quic_transport.c b/src/event/ngx_event_quic_transport.c
--- a/src/event/ngx_event_quic_transport.c
+++ b/src/event/ngx_event_quic_transport.c
@@ -1048,7 +1048,7 @@ ngx_quic_frame_allowed(ngx_quic_header_t
          /* RESET_STREAM */          0x3,
          /* STOP_SENDING */          0x3,
          /* CRYPTO */                0xD,
-         /* NEW_TOKEN */             0x1,
+         /* NEW_TOKEN */             0x0, /* only sent by server */
          /* STREAM0 */               0x3,
          /* STREAM1 */               0x3,
          /* STREAM2 */               0x3,