]> git.ipfire.org Git - thirdparty/curl.git/commit
openssl-quic: ignore unexpected streams opened by server
authorStefan Eissing <stefan@eissing.org>
Wed, 1 Oct 2025 09:23:27 +0000 (11:23 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Wed, 1 Oct 2025 13:56:58 +0000 (15:56 +0200)
commitd71ec36d1b6ec2feeb3811f143e7e98fceb95be1
tree9b1f1d817cc4a3a86537d1ae87533d43d8d9854c
parente891b4195fdc133e975d86bda865720cafd6add0
openssl-quic: ignore unexpected streams opened by server

HTTP/3 defines "reserved stream types" that are intended to be ignored
by a receiver. This is part of the "greasing" effort that flexes parts
of the protocol that are needed for future extensions.

curl's OpenSSL-QUIC implementation treated all unexpected streams as
an error. Which seems the right thing to do *but* for these reserved types.
However OpenSSL does not expose this type and thus, curl needs to silently
discard all unexpected streams opened by the server to allow interop
with servers that flex the GREASE parts.

Fixes #18780
Reported-by: Pocs Norbert
Closes #18791
lib/vquic/curl_osslq.c