]> git.ipfire.org Git - thirdparty/haproxy.git/commit
BUG/MAJOR: quic: Wrong quic_max_available_room() returned value
authorFrédéric Lécaille <flecaille@haproxy.com>
Fri, 4 Mar 2022 14:44:21 +0000 (15:44 +0100)
committerAmaury Denoyelle <adenoyelle@haproxy.com>
Fri, 4 Mar 2022 16:47:32 +0000 (17:47 +0100)
commit5bcfd33063a460ed6efafa840e354e383d4252c0
tree2de4a5cb8af8fd7c9ec04e6118800a5bc55a3866
parent4fe7d8a5b28f98b8225fa858ba83d328edc1123d
BUG/MAJOR: quic: Wrong quic_max_available_room() returned value

Around limits for QUIC integer encoding, this functions could return
wrong values which lead to qc_build_frms() to prepare wrong CRYPTO (less chances)
or STREAM frames (more chances). qc_do_build_pkt() could build wrong packets
with bad CRYPTO/STREAM frames which could not be decoded by the peer.
In such a case ngtcp2 closes the connection with an ENCRYPTION_ERROR error
in a transport CONNECTION_CLOSE frame.
include/haproxy/xprt_quic.h