changeset 8437:4e75267865de quic

QUIC: fixed off-by-one in frame range handler. The ctx->pnum is incremented after the packet is sent, thus pointing to the next packet number, which should not be used in comparison.
author Vladimir Homutov <vl@nginx.com>
date Thu, 18 Jun 2020 11:16:35 +0300
parents 9fe7875ce4bb
children a2c34e77cfc1
files src/event/ngx_event_quic.c
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/src/event/ngx_event_quic.c
+++ b/src/event/ngx_event_quic.c
@@ -2262,7 +2262,7 @@ ngx_quic_handle_ack_frame_range(ngx_conn
 
     if (!found) {
 
-        if (max <= ctx->pnum) {
+        if (max < ctx->pnum) {
             /* duplicate ACK or ACK for non-ack-eliciting frame */
             return NGX_OK;
         }