Treat receipt of NEW_TOKEN as connection error PROTOCOL_VIOLATION.

diff --git a/src/event/ngx_event_quic.c b/src/event/ngx_event_quic.c
index 2b226a3eb1689fedaafa31960f0adf079a035d43..376d1756b0afff34964568cf0b0b8ec487805150 100644 (file)
--- a/src/event/ngx_event_quic.c
+++ b/src/event/ngx_event_quic.c
@@ -1948,7 +1948,6 @@ ngx_quic_payload_handler(ngx_connection_t *c, ngx_quic_header_t *pkt)
 
         case NGX_QUIC_FT_NEW_CONNECTION_ID:
         case NGX_QUIC_FT_RETIRE_CONNECTION_ID:
-        case NGX_QUIC_FT_NEW_TOKEN:
         case NGX_QUIC_FT_RESET_STREAM:
         case NGX_QUIC_FT_STOP_SENDING:
         case NGX_QUIC_FT_PATH_CHALLENGE:

diff --git a/src/event/ngx_event_quic_transport.c b/src/event/ngx_event_quic_transport.c
index e056e23de5d177972c493226e0922e178829c19c..32fcb5a66362df785983789d28694d18bae81d39 100644 (file)
--- a/src/event/ngx_event_quic_transport.c
+++ b/src/event/ngx_event_quic_transport.c
@@ -1048,7 +1048,7 @@ ngx_quic_frame_allowed(ngx_quic_header_t *pkt, ngx_uint_t frame_type)
          /* RESET_STREAM */          0x3,
          /* STOP_SENDING */          0x3,
          /* CRYPTO */                0xD,
-         /* NEW_TOKEN */             0x1,
+         /* NEW_TOKEN */             0x0, /* only sent by server */
          /* STREAM0 */               0x3,
          /* STREAM1 */               0x3,
          /* STREAM2 */               0x3,