diff options
| -rw-r--r-- | src/event/ngx_event_quic_protection.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/event/ngx_event_quic_protection.c b/src/event/ngx_event_quic_protection.c index 261f02d7f..7a4ebdaa7 100644 --- a/src/event/ngx_event_quic_protection.c +++ b/src/event/ngx_event_quic_protection.c @@ -1019,6 +1019,10 @@ ngx_quic_decrypt(ngx_quic_header_t *pkt, ngx_ssl_conn_t *ssl_conn, * AES-Based and ChaCha20-Based header protections sample 16 bytes */ + if (pkt->len < EVP_GCM_TLS_TAG_LEN + 4) { + return NGX_DECLINED; + } + sample = p + 4; /* header protection */ |