From: Sergey Kandaurov <pluknet@nginx.com>
Date: Tue, 10 Mar 2020 15:40:18 +0000 (+0300)
Subject: Fixed nonce in short packet protection.
X-Git-Tag: release-1.25.0~4^2~909
X-Git-Url: http://git.kaiwu.me/postgresql/log/contrib/postgres_fdw/static/gitweb.js?a=commitdiff_plain;h=385408732e4b3934d4bf14b1628f4b21a646875c;p=nginx.git

Fixed nonce in short packet protection.
---

diff --git a/src/event/ngx_event_quic.c b/src/event/ngx_event_quic.c
index 6ea9d23ed..55eea0137 100644
--- a/src/event/ngx_event_quic.c
+++ b/src/event/ngx_event_quic.c
@@ -758,7 +758,9 @@ ngx_quic_create_short_packet(ngx_connection_t *c, ngx_ssl_conn_t *ssl_conn,
     }
 
     nonce = ngx_pstrdup(c->pool, &pkt->secret->iv);
-    if (pkt->level == ssl_encryption_handshake) {
+    if (pkt->level == ssl_encryption_handshake
+        || pkt->level == ssl_encryption_application)
+    {
         nonce[11] ^= (*pkt->number - 1);
     }