From: Frédéric Lécaille <flecaille@haproxy.com>
Date: Tue, 24 May 2022 08:54:42 +0000 (+0200)
Subject: BUG/MINOR: quic: Largest RX packet numbers mixing
X-Git-Tag: v2.6.0~44
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=91a211fb0804fcd5dceace92765fbfdff35a748f;p=thirdparty%2Fhaproxy.git

BUG/MINOR: quic: Largest RX packet numbers mixing

When we select the next encryption level in qc_treat_rx_pkts() we
must reset the local largest_pn variable if we do not want to reuse its
previous value for this encryption. This bug could only happend during
handshake step and had no visible impact because this variable
is only used during the header protection removal step which hopefully
supports the packet reordering.
---

diff --git a/src/xprt_quic.c b/src/xprt_quic.c
index de65b7f656..dd1bbbe7ea 100644
--- a/src/xprt_quic.c
+++ b/src/xprt_quic.c
@@ -3598,6 +3598,7 @@ int qc_treat_rx_pkts(struct quic_enc_level *cur_el, struct quic_enc_level *next_
 	if (qel == cur_el) {
 		BUG_ON(qel == next_el);
 		qel = next_el;
+		largest_pn = -1;
 		goto next_tel;
 	}