diff options
| author | Vladimir Homutov <vl@nginx.com> | 2020-06-18 11:16:35 +0300 |
|---|---|---|
| committer | Vladimir Homutov <vl@nginx.com> | 2020-06-18 11:16:35 +0300 |
| commit | a213258b5beb8d83a0907eed00fe402d67610303 (patch) | |
| tree | cf6ab9d9fd542a1d8de49e0036cc851a8cfaef25 | |
| parent | 3b3264dc25a6d5da80c1641671737fc6505c45f1 (diff) | |
| download | nginx-a213258b5beb8d83a0907eed00fe402d67610303.tar.gz nginx-a213258b5beb8d83a0907eed00fe402d67610303.tar.bz2 | |
QUIC: fixed off-by-one in frame range handler.
The ctx->pnum is incremented after the packet is sent, thus pointing to the
next packet number, which should not be used in comparison.
| -rw-r--r-- | src/event/ngx_event_quic.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/event/ngx_event_quic.c b/src/event/ngx_event_quic.c index ce07930d6..562a215ea 100644 --- a/src/event/ngx_event_quic.c +++ b/src/event/ngx_event_quic.c @@ -2262,7 +2262,7 @@ ngx_quic_handle_ack_frame_range(ngx_connection_t *c, ngx_quic_send_ctx_t *ctx, if (!found) { - if (max <= ctx->pnum) { + if (max < ctx->pnum) { /* duplicate ACK or ACK for non-ack-eliciting frame */ return NGX_OK; } |