]> git.ipfire.org Git - thirdparty/openssl.git/commit
Treat unknown frames as a protocol error
authorMatt Caswell <matt@openssl.org>
Thu, 1 Dec 2022 16:36:08 +0000 (16:36 +0000)
committerHugo Landau <hlandau@openssl.org>
Wed, 22 Feb 2023 05:34:03 +0000 (05:34 +0000)
commitce3106baba7601bfaf1d1412221e18dec4878e18
treea62a2ae534fc6d5455fcfe5bb566512ad615f82c
parent3f968ecf479ed6ab8a2b25bd1077300baf2287a7
Treat unknown frames as a protocol error

From RFC9000, section 19.21 "An extension to QUIC that wishes to use a new
type of frame MUST first ensure that a peer is able to understand the
frame". So if we receive an unknown frame type from a peer we should treat
it as a protocol violation. In fact we ignore it, and ignore all the
contents of the rest of the packet and continue on regardless.

Reviewed-by: Hugo Landau <hlandau@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20030)
ssl/quic/quic_rx_depack.c