CERBERUS/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2026-10-23 12:32:56 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

QUIC: limited the total number of frames.

Browse source 
Exceeding 10000 allocated frames is considered a flood.
This commit is contained in:
Roman Arutyunyan 2021-10-13 14:46:51 +03:00
parent 6e58593a59
commit da28a4c626
2 changed files with 7 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/event/quic/ngx_event_quic_connection.h
View file

@ -228,8 +228,8 @@ struct ngx_quic_connection_s {
ngx_chain_t *free_bufs;
ngx_buf_t *free_shadow_bufs;
#ifdef NGX_QUIC_DEBUG_ALLOC
ngx_uint_t nframes;
#ifdef NGX_QUIC_DEBUG_ALLOC
ngx_uint_t nbufs;
#endif

8
src/event/quic/ngx_event_quic_frames.c
View file

@ -38,18 +38,22 @@ ngx_quic_alloc_frame(ngx_connection_t *c)
"quic reuse frame n:%ui", qc->nframes);
#endif
} else {
} else if (qc->nframes < 10000) {
frame = ngx_palloc(c->pool, sizeof(ngx_quic_frame_t));
if (frame == NULL) {
return NULL;
}
#ifdef NGX_QUIC_DEBUG_ALLOC
++qc->nframes;
#ifdef NGX_QUIC_DEBUG_ALLOC
ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0,
"quic alloc frame n:%ui", qc->nframes);
#endif
} else {
ngx_log_error(NGX_LOG_INFO, c->log, 0, "quic flood detected");
return NULL;
}
ngx_memzero(frame, sizeof(ngx_quic_frame_t));