CERBERUS/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2026-10-23 12:32:56 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

QUIC: added missing checks for limits in stream frames parsing.

Browse source
This commit is contained in:
Vladimir Homutov 2021-04-19 09:46:37 +03:00
parent db4c8fe45f
commit f184bc0a0a
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
src/event/quic/ngx_event_quic_transport.c
View file

@ -1003,6 +1003,10 @@ ngx_quic_parse_frame(ngx_quic_header_t *pkt, u_char *start, u_char *end,
goto error;
}
if (f->u.streams_blocked.limit > 0x1000000000000000) {
goto error;
}
f->u.streams_blocked.bidi =
(f->type == NGX_QUIC_FT_STREAMS_BLOCKED) ? 1 : 0;
break;
@ -1015,6 +1019,10 @@ ngx_quic_parse_frame(ngx_quic_header_t *pkt, u_char *start, u_char *end,
goto error;
}
if (f->u.max_streams.limit > 0x1000000000000000) {
goto error;
}
f->u.max_streams.bidi = (f->type == NGX_QUIC_FT_MAX_STREAMS) ? 1 : 0;
break;