IntenseWebs/nginx
3
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2025-01-06 22:23:00 -06:00
Code Issues Packages Projects Releases Wiki Activity

QUIC: fixed computation of nonce with packet numbers beyond 2^32.

Browse Source 
Prodded by Yu Zhu.
This commit is contained in:
Sergey Kandaurov 2022-11-25 15:56:33 +04:00
parent 7d73c50a2d
commit d3294e61d5
1 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/event/quic/ngx_event_quic_protection.c
View File

@ -964,10 +964,14 @@ ngx_quic_parse_pn(u_char **pos, ngx_int_t len, u_char *mask,
static void
ngx_quic_compute_nonce(u_char *nonce, size_t len, uint64_t pn)
{
nonce[len - 4] ^= (pn & 0xff000000) >> 24;
nonce[len - 3] ^= (pn & 0x00ff0000) >> 16;
nonce[len - 2] ^= (pn & 0x0000ff00) >> 8;
nonce[len - 1] ^= (pn & 0x000000ff);
nonce[len - 8] ^= (pn >> 56) & 0x3f;
nonce[len - 7] ^= (pn >> 48) & 0xff;
nonce[len - 6] ^= (pn >> 40) & 0xff;
nonce[len - 5] ^= (pn >> 32) & 0xff;
nonce[len - 4] ^= (pn >> 24) & 0xff;
nonce[len - 3] ^= (pn >> 16) & 0xff;
nonce[len - 2] ^= (pn >> 8) & 0xff;
nonce[len - 1] ^= pn & 0xff;
}