Use the CHLO packet size, not message size when determining how large a REJ can be. Protected by --…

net/tools/quic/stateless_rejector.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/tools/quic/stateless_rejector.h"
 
 #include "net/quic/core/quic_crypto_server_stream.h"
 #include "net/quic/core/quic_flags.h"
 
 namespace net {
@@ skipping 17 matching lines @@
   StatelessRejector* rejector_;
 };
 
 StatelessRejector::StatelessRejector(
     QuicVersion version,
     const QuicVersionVector& versions,
     const QuicCryptoServerConfig* crypto_config,
     QuicCompressedCertsCache* compressed_certs_cache,
     const QuicClock* clock,
     QuicRandom* random,
+    QuicByteCount chlo_packet_size,
     const IPEndPoint& client_address,
     const IPEndPoint& server_address)
     : state_(FAILED),
       error_(QUIC_INTERNAL_ERROR),
       version_(version),
       versions_(versions),
       connection_id_(0),
+      chlo_packet_size_(chlo_packet_size),
       client_address_(client_address),
       server_address_(server_address),
       clock_(clock),
       random_(random),
       crypto_config_(crypto_config),
       compressed_certs_cache_(compressed_certs_cache),
       chlo_(nullptr) {}
 
 StatelessRejector::~StatelessRejector() {}
 
@@ skipping 24 matching lines @@
 void StatelessRejector::ProcessClientHello(
     const CryptoHandshakeMessage& client_hello,
     const ValidateClientHelloResultCallback::Result& result) {
   QuicCryptoNegotiatedParameters params;
   DiversificationNonce diversification_nonce;
   QuicErrorCode error = crypto_config_->ProcessClientHello(
       result,
       /*reject_only=*/true, connection_id_, server_address_.address(),
       client_address_, version_, versions_,
       /*use_stateless_rejects=*/true, server_designated_connection_id_, clock_,
-      random_, compressed_certs_cache_, &params, &proof_, &reply_,
-      &diversification_nonce, &error_details_);
+      random_, compressed_certs_cache_, &params, &proof_,
+      QuicCryptoStream::CryptoMessageFramingOverhead(version_),
+      chlo_packet_size_, &reply_, &diversification_nonce, &error_details_);
   if (error != QUIC_NO_ERROR) {
     error_ = error;
     return;
   }
 
   if (reply_.tag() == kSREJ) {
     state_ = REJECTED;
     return;
   }
 
   state_ = ACCEPTED;
 }
 
 }  // namespace net