Minor change in parsing of GOAWAY frames for correctness.

net/spdy/spdy_framer.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // TODO(rtenhove) clean up frame buffer size calculations so that we aren't
 // constantly adding and subtracting header sizes; this is ugly and error-
 // prone.
 
 #include "net/spdy/spdy_framer.h"
 
@@ skipping 1201 matching lines @@
                 reinterpret_cast<SpdyRstStreamControlFrame*>(&control_frame);
             visitor_->OnRstStream(rst_stream_frame->stream_id(),
                                   rst_stream_frame->status());
           }
           break;
         case GOAWAY: {
             SpdyFrameReader reader(current_frame_buffer_.get(),
                                    current_frame_len_);
             reader.Seek(GetControlFrameMinimumSize());  // Skip frame header.
             SpdyStreamId last_accepted_stream_id = kInvalidStream;
-            bool successful_read = reader.ReadUInt32(&last_accepted_stream_id);
+            bool successful_read = reader.ReadUInt31(&last_accepted_stream_id);
             DCHECK(successful_read);
             SpdyGoAwayStatus status = GOAWAY_OK;
             if (spdy_version_ >= 3) {
               uint32 status_raw = GOAWAY_OK;
               successful_read = reader.ReadUInt32(&status_raw);
               DCHECK(successful_read);
               if (status_raw > static_cast<uint32>(GOAWAY_INVALID) &&
                   status_raw < static_cast<uint32>(GOAWAY_NUM_STATUS_CODES)) {
                 status = static_cast<SpdyGoAwayStatus>(status_raw);
               } else {
@@ skipping 838 matching lines @@
       builder->WriteString(it->first);
       builder->WriteString(it->second);
     } else {
       builder->WriteStringPiece32(it->first);
       builder->WriteStringPiece32(it->second);
     }
   }
 }
 
 }  // namespace net