]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8de80cc) | patch
BUG/MINOR: quic-be: fix Initial token length check on backend connections
authorWilliam Dauchy <wdauchy@gmail.com>
Sat, 7 Nov 2026 19:44:30 +0000 (20:44 +0100)
committerFrederic Lecaille <flecaille@haproxy.com>
Thu, 12 Nov 2026 15:20:13 +0000 (16:20 +0100)
commita5855404ef6db94519fe4a139e788b73a83cfbb8
treece826bd10975220b630d833ad1b1e43b3d540da7tree | snapshot
parent8de80ccc96000a1780969497c2b00be6eef89c1fcommit | diff
BUG/MINOR: quic-be: fix Initial token length check on backend connections

The check rejecting server Initial packets with a non-zero token length
tests pkt->token_len before it is set, so it never matches. Test the
parsed <token_len> value instead, as required by RFC 9000 17.2.2.

This should be backported up to 3.3, where it was introduced by 43d88a44f
("MINOR: quic-be: Datagrams and packet parsing support").

Signed-off-by: William Dauchy <wdauchy@gmail.com>
src/quic_rx.c diff | blob | history
haproxy upstream