b8c061c751
Graham Campbell
2026-07-15
Subject
ngtcp2: let verify failures win over expiry processing errors
Binary
No binary (build failed)
Architecture & Compiler Flags
—
Build Log
(log yok)
Commit Diff GitHub →
lib/vquic/cf-ngtcp2-cmn.c+7 -4
| @@ -1750,11 +1750,14 @@ CURLcode Curl_cf_ngtcp2_cmn_set_expiry(struct Curl_cfilter *cf, | |
| return CURLE_SEND_ERROR; | |
| } | |
| result = Curl_cf_ngtcp2_progress_ingress(cf, data, pktx); | |
| - | if(result) |
| - | return result; |
| - | result = Curl_cf_ngtcp2_progress_egress(cf, data, pktx); |
| - | if(result) |
| + | if(!result) |
| + | result = Curl_cf_ngtcp2_progress_egress(cf, data, pktx); |
| + | if(result) { |
| + | /* a verify failure during ingress must win over generic errors */ |
| + | if(ctx->tls_vrfy_result) |
| + | result = ctx->tls_vrfy_result; |
| return result; | |
| + | } |
| /* ask again, things might have changed */ | |
| expiry = ngtcp2_conn_get_expiry(ctx->qconn); | |
| } | |