From c63e6ecd4ba99336260d83d2116fd19ae8112435 Mon Sep 17 00:00:00 2001
From: Amaury Denoyelle <adenoyelle@haproxy.com>
Date: Wed, 8 Apr 2026 10:32:17 +0200
Subject: [PATCH] BUG/MINOR: quic: increment pos pointer on QMux transport
 params parsing

QUIC frame parsers functions take a <pos> pointer as input argument for
the data to be parsed. If parsing is successful, <pos> must be
incremented to point to the next data.

Increment was not performed when parsing QMux transport parameters
frame. This commit fixes this. Note that for now there is no real issue
as xprt_qstrm does not check the QMux frame length.

No need to backport.
---
 src/quic_frame.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/quic_frame.c b/src/quic_frame.c
index edf81f14a..1cb2006fd 100644
--- a/src/quic_frame.c
+++ b/src/quic_frame.c
@@ -1081,6 +1081,7 @@ static int quic_parse_qmux_transport_parameters(struct quic_frame *frm, struct q
 	if (!quic_transport_params_decode(&params_frm->params, 1, *pos, end))
 		return 0;
 
+	*pos += len;
 	return 1;
 }