From 5e5c703656a93b6b6413bdbe72043c863fb5f224 Mon Sep 17 00:00:00 2001 From: Vladimir Homutov Date: Thu, 30 Apr 2020 12:22:35 +0300 Subject: [PATCH] Store clearflags in pkt->flags after decryption. It doesn't make sense to store protected flags. --- src/event/ngx_event_quic_protection.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/event/ngx_event_quic_protection.c b/src/event/ngx_event_quic_protection.c index d5afaefc1..354d4f9fa 100644 --- a/src/event/ngx_event_quic_protection.c +++ b/src/event/ngx_event_quic_protection.c @@ -1015,6 +1015,7 @@ ngx_quic_decrypt(ngx_quic_header_t *pkt, ngx_ssl_conn_t *ssl_conn, pn = ngx_quic_parse_pn(&p, pnl, &mask[1], largest_pn); pkt->pn = pn; + pkt->flags = clearflags; #ifdef NGX_QUIC_DEBUG_CRYPTO ngx_quic_hexdump(pkt->log, "quic mask", mask, 5);