diff options
| author | Sergey Kandaurov <pluknet@nginx.com> | 2020-06-05 20:59:26 +0300 |
|---|---|---|
| committer | Sergey Kandaurov <pluknet@nginx.com> | 2020-06-05 20:59:26 +0300 |
| commit | d42354136031a3dfce5f7e5a857baae950c4fb14 (patch) | |
| tree | addafbd57658b747a6195f8d76eb12109ae3e9af /src | |
| parent | facf59bd863feedee9e188c578263070f513b77f (diff) | |
| download | nginx-d42354136031a3dfce5f7e5a857baae950c4fb14.tar.gz nginx-d42354136031a3dfce5f7e5a857baae950c4fb14.tar.bz2 | |
Reject invalid STREAM ID with STREAM_STATE_ERROR connection error.
Diffstat (limited to 'src')
| -rw-r--r-- | src/event/ngx_event_quic.c | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/src/event/ngx_event_quic.c b/src/event/ngx_event_quic.c index 376d1756b..cb0df3d5d 100644 --- a/src/event/ngx_event_quic.c +++ b/src/event/ngx_event_quic.c @@ -2598,12 +2598,24 @@ ngx_quic_handle_stream_frame(ngx_connection_t *c, ngx_quic_header_t *pkt, qc = c->quic; f = &frame->u.stream; + if ((f->stream_id & NGX_QUIC_STREAM_UNIDIRECTIONAL) + && (f->stream_id & NGX_QUIC_STREAM_SERVER_INITIATED)) + { + qc->error = NGX_QUIC_ERR_STREAM_STATE_ERROR; + return NGX_ERROR; + } + sn = ngx_quic_find_stream(&qc->streams.tree, f->stream_id); if (sn == NULL) { ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0, "quic stream id 0x%xi is new", f->stream_id); + if (f->stream_id & NGX_QUIC_STREAM_SERVER_INITIATED) { + qc->error = NGX_QUIC_ERR_STREAM_STATE_ERROR; + return NGX_ERROR; + } + n = (f->stream_id & NGX_QUIC_STREAM_UNIDIRECTIONAL) ? qc->tp.initial_max_stream_data_uni : qc->tp.initial_max_stream_data_bidi_remote; |