mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-09-20 21:31:28 +02:00
Code Issues Projects Releases Wiki Activity

BUG/MINOR: quic-be: missing Initial packet number space discarding

Browse Source 
A QUIC client must discard the Initial packet number space as soon as it first
sends a Handshake packet.

This patch implements this packet number space which was missing.
This commit is contained in:
Frederic Lecaille 2025-08-21 08:27:44 +02:00
parent 901de11157
commit 9a22770ac5
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
src/quic_tx.c
View File

@ -443,6 +443,24 @@ static int qc_send_ppkts(struct buffer *buf, struct ssl_sock_ctx *ctx)
if (pkt->in_flight_len)
qc_set_timer(qc);
TRACE_PROTO("TX pkt", QUIC_EV_CONN_SPPKTS, qc, pkt);
if (pkt->type == QUIC_PACKET_TYPE_HANDSHAKE && qc_is_back(qc) &&
qc->ipktns && !quic_tls_pktns_is_dcd(qc, qc->ipktns)) {
/* RFC 9000
* 4.9.1. Discarding Initial Keys
* The successful use of Handshake packets indicates that no more
* Initial packets need to be exchanged, as these keys can only
* be produced after receiving all CRYPTO frames from Initial packets.
* Thus, a client MUST discard Initial keys when it first sends a
* Handshake packet...
*
* Discard the Initial packet number space.
*/
TRACE_PROTO("discarding Initial pktns", QUIC_EV_CONN_PRSHPKT, qc);
quic_pktns_discard(qc->ipktns, qc, 0);
qc_set_timer(qc);
qc_el_rx_pkts_del(qc->iel);
qc_release_pktns_frms(qc, qc->ipktns);
}
next_pkt = pkt->next;
quic_tx_packet_refinc(pkt);
eb64_insert(&pkt->pktns->tx.pkts, &pkt->pn_node);