]> git.ipfire.org Git - thirdparty/haproxy.git/commit
projects / thirdparty / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: aaf32f0) | patch
BUG/MINOR: quic: Wrong token length check (quic_generate_retry_token())
authorFrédéric Lécaille <flecaille@haproxy.com>
Mon, 15 May 2023 15:40:00 +0000 (17:40 +0200)
committerWilly Tarreau <w@1wt.eu>
Wed, 24 May 2023 14:30:11 +0000 (16:30 +0200)
commit6d6ddb2ce58807b8defb0b38d9d524b958278ce4
treedd930d70aa79adfc004e64c8eeaedaf478e394actree | snapshot
parentaaf32f0c83750f4157e0deba6905361f549d3781commit | diff
BUG/MINOR: quic: Wrong token length check (quic_generate_retry_token())

This bug would never occur because the buffer supplied to quic_generate_retry_token()
to build a Retry token is large enough to embed such a token. Anyway, this patch
fixes quic_generate_retry_token() implementation.

There were two errors: this is the ODCID which is added to the token. Furthermore
the timestamp was not taken into an account.

Must be backported to 2.6 and 2.7.
src/quic_conn.c diff | blob | blame | history
Mirror of https://github.com/haproxy/haproxy.git