Update SPDY4 length field to exclude frame prefix length.

net/spdy/spdy_frame_builder.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/spdy/spdy_frame_builder.h"
 
 #include <limits>
 
 #include "base/logging.h"
 #include "net/spdy/spdy_framer.h"
@@ skipping 87 matching lines @@
                                         uint8 flags,
                                         SpdyStreamId stream_id) {
   DCHECK_LE(DATA, type);
   DCHECK_GE(LAST_CONTROL_TYPE, type);
   DCHECK_EQ(0u, stream_id & ~kStreamIdMask);
   DCHECK_LE(4, framer.protocol_version());
   bool success = true;
   // Upstream DCHECK's that capacity_ is under the maximum frame size at this
   // point. Chromium does not, because of the large additional zlib inflation
   // factor we use. (Frame size is is still checked by OverwriteLength() below).
-  success &= WriteUInt16(capacity_);
+  if (type != DATA) {
+    success &= WriteUInt16(capacity_ - framer.GetControlFrameHeaderSize());
+  } else {
+    success &= WriteUInt16(capacity_ - framer.GetDataFrameMinimumSize());
+  }
   success &= WriteUInt8(type);
   success &= WriteUInt8(flags);
   success &= WriteUInt32(stream_id);
   DCHECK_EQ(framer.GetDataFrameMinimumSize(), length());
   return success;
 }
 
 bool SpdyFrameBuilder::WriteString(const std::string& value) {
   if (value.size() > 0xffff) {
     DCHECK(false) << "Tried to write string with length > 16bit.";
@@ skipping 19 matching lines @@
     return false;
   }
 
   char* dest = GetWritableBuffer(data_len);
   memcpy(dest, data, data_len);
   Seek(data_len);
   return true;
 }
 
 bool SpdyFrameBuilder::RewriteLength(const SpdyFramer& framer) {
-  if (framer.protocol_version() < 4) {
-    return OverwriteLength(framer,
-                           length_ - framer.GetControlFrameHeaderSize());
-  } else {
-    return OverwriteLength(framer, length_);
-  }
+  return OverwriteLength(framer,
+                         length_ - framer.GetControlFrameHeaderSize());
 }
 
 bool SpdyFrameBuilder::OverwriteLength(const SpdyFramer& framer,
                                        size_t length) {
   if (framer.protocol_version() < 4) {
     DCHECK_GT(framer.GetFrameMaximumSize() - framer.GetFrameMinimumSize(),
               length);
   } else {
     DCHECK_GE(framer.GetFrameMaximumSize(), length);
   }
@@ skipping 26 matching lines @@
 
   if (length_ + length > capacity_) {
     DCHECK(false);
     return false;
   }
 
   return true;
 }
 
 }  // namespace net