Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Mvfst server does not close the connection when the client sends NEW_CONNECTION_ID frames that exceed the server's active_connection_id_limit. #320

Open
QUICTester opened this issue Oct 27, 2023 · 0 comments

Comments

@QUICTester
Copy link

QUICTester commented Oct 27, 2023

I am a member of a group investigating automated testing of QUIC protocol implementations. During our tests involving a Mvfst implementation in Proxygen (v2023.09.18.00).

The Mvfst server does not close the connection when the client sends NEW_CONNECTION_ID frames carrying Connection IDs that exceed the server's active_connection_id_limit.

According to RFC 9000: "After processing a NEW_CONNECTION_ID frame and adding and retiring active connection IDs, if the number of active connection IDs exceeds the value advertised in its active_connection_id_limit transport parameter, an endpoint MUST close the connection with an error of type CONNECTION_ID_LIMIT_ERROR."

Thank you for your time.

Steps To Reproduce
Once the handshake is complete, send a 1-RTT packet carrying a number of NEW_CONNECTION_ID frames that exceed the active_connection_id_limit by 1.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant