commit 963c2ecf2daa62a5979e630858c561ba6d803755
author renjietang <renjietang@google.com> Thu Sep 12 11:46:50 2019 -0700
committer Copybara-Service <copybara-worker@google.com> Thu Sep 12 11:50:31 2019 -0700
tree 6ef9a59ca3c19efc64f0a0cdba3d292f9dc10692
parent d1f732fd00117b204f3ece3ff1f5f836bd88e291

Reset stream if stream frame contains data that goes beyond stream's close offset.

This fixes http://crbug/1002119

gfe-relnote: protected by gfe2_reloadable_flag_quic_rst_if_stream_frame_beyond_close_offset.
PiperOrigin-RevId: 268732204
Change-Id: I66f845e320de89e8634b1bfb0725f599fc43dfd6

quic/core/quic_stream_sequencer.cc

diff --git a/quic/core/quic_stream_sequencer.cc b/quic/core/quic_stream_sequencer.cc
index dc7b0cd..8f84fb9 100644
--- a/quic/core/quic_stream_sequencer.cc
+++ b/quic/core/quic_stream_sequencer.cc
@@ -38,6 +38,7 @@
 QuicStreamSequencer::~QuicStreamSequencer() {}
 
 void QuicStreamSequencer::OnStreamFrame(const QuicStreamFrame& frame) {
+  DCHECK_LE(frame.offset + frame.data_length, close_offset_);
   ++num_frames_received_;
   const QuicStreamOffset byte_offset = frame.offset;
   const size_t data_len = frame.data_length;