Store clearflags in pkt->flags after decryption.

It doesn't make sense to store protected flags.

diff --git a/src/event/ngx_event_quic_protection.c b/src/event/ngx_event_quic_protection.c
index d5afaefc17d677c9021f8bfc95b07d5224e4df3f..354d4f9fa967d67c73bdae8450f0308cabda7b2e 100644 (file)
--- a/src/event/ngx_event_quic_protection.c
+++ b/src/event/ngx_event_quic_protection.c
@@ -1015,6 +1015,7 @@ ngx_quic_decrypt(ngx_quic_header_t *pkt, ngx_ssl_conn_t *ssl_conn,
     pn = ngx_quic_parse_pn(&p, pnl, &mask[1], largest_pn);
 
     pkt->pn = pn;
+    pkt->flags = clearflags;
 
 #ifdef NGX_QUIC_DEBUG_CRYPTO
     ngx_quic_hexdump(pkt->log, "quic mask", mask, 5);