QUIC CONFORMANCE: RFC 9000 s. 12.5: Ensure CFQ can not be used to sen…

…d disallowed frame types in a given PN space Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from #21135)
openssl · Jul 16, 2023 · 8d2e353 · 8d2e353
1 parent 5a1b1d2
commit 8d2e353
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/ssl/quic/quic_txp.c b/ssl/quic/quic_txp.c
@@ -656,7 +656,7 @@ static const struct archetype_data archetypes[QUIC_ENC_LEVEL_NUM][TX_PACKETISER_
             /*allow_stream_rel                =*/ 0,
             /*allow_conn_fc                   =*/ 0,
             /*allow_conn_close                =*/ 1,
-            /*allow_cfq_other                 =*/ 1,
+            /*allow_cfq_other                 =*/ 0,
             /*allow_new_token                 =*/ 0,
             /*allow_force_ack_eliciting       =*/ 1,
         },
@@ -693,7 +693,7 @@ static const struct archetype_data archetypes[QUIC_ENC_LEVEL_NUM][TX_PACKETISER_
             /*allow_stream_rel                =*/ 0,
             /*allow_conn_fc                   =*/ 0,
             /*allow_conn_close                =*/ 1,
-            /*allow_cfq_other                 =*/ 1,
+            /*allow_cfq_other                 =*/ 0,
             /*allow_new_token                 =*/ 0,
             /*allow_force_ack_eliciting       =*/ 1,
         },