curl/lib/vquic
Stefan Eissing bb78c45407
vquic: fix recvmsg loop for max_pkts
The parameter `max_pkts` was not checked in the recvmsg() implementation
of vquic_recv_packets() as the packter counter was never increased. This
led to the loop running until an EAGAIN was encountered. Which, in any
real case scenario, does no harm as long as libcurl is ingesting packets
faster than a server is able to send them.

However on a slow device and a fast network this could happen and allow
a denial of serice.

Not a real regression as the vulnerable code has never been released.
libcurl 8.16.0 does not have this bug.

Closes #19186
2025-10-22 11:40:47 +02:00
..
curl_ngtcp2.c ngtcp2: adopt ngtcp2_conn_get_stream_user_data if available 2025-10-19 11:07:32 +02:00
curl_ngtcp2.h build: fix build errors/warnings in rare configurations 2025-07-23 22:17:03 +02:00
curl_osslq.c lib: remove newlines from failf() calls 2025-10-18 23:17:54 +02:00
curl_osslq.h build: fix build errors/warnings in rare configurations 2025-07-23 22:17:03 +02:00
curl_quiche.c quic: improve UDP GRO receives 2025-10-17 17:23:46 +02:00
curl_quiche.h build: fix build errors/warnings in rare configurations 2025-07-23 22:17:03 +02:00
vquic-tls.c lib: stop overriding system printf symbols 2025-10-06 20:57:59 +02:00
vquic-tls.h http/3: report handshake with version and cipher as for TCP connections 2025-07-14 14:08:32 +02:00
vquic.c vquic: fix recvmsg loop for max_pkts 2025-10-22 11:40:47 +02:00
vquic.h build: fix build errors/warnings in rare configurations 2025-07-23 22:17:03 +02:00
vquic_int.h quic: improve UDP GRO receives 2025-10-17 17:23:46 +02:00