]> git.kaiwu.me - nginx.git/commit
QUIC: attempt decrypt before checking for stateless reset.
authorMartin Duke <m.duke@f5.com>
Tue, 12 Oct 2021 08:57:50 +0000 (11:57 +0300)
committerMartin Duke <m.duke@f5.com>
Tue, 12 Oct 2021 08:57:50 +0000 (11:57 +0300)
commit7b12abb0a85e7790dffc08ab3ad64893d957f75c
treebbd1ccb920419732c87380ec68ae0fc09931ebb8
parent5e37df0bf413bf34407ff4b399b58dc006e24b71
QUIC: attempt decrypt before checking for stateless reset.

Checking the reset after encryption avoids false positives.  More importantly,
it avoids the check entirely in the usual case where decryption succeeds.

RFC 9000, 10.3.1  Detecting a Stateless Reset

    Endpoints MAY skip this check if any packet from a datagram is
    successfully processed.
src/event/quic/ngx_event_quic.c