Use the CHLO packet size, not message size when determining how large a REJ can be. Protected by --…

net/tools/quic/stateless_rejector.h

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_QUIC_STATELESS_REJECTOR_H_
 #define NET_QUIC_STATELESS_REJECTOR_H_
 
 #include "base/strings/string_piece.h"
 #include "net/quic/core/crypto/crypto_framer.h"
 #include "net/quic/core/crypto/quic_crypto_server_config.h"
@@ skipping 11 matching lines @@
     ACCEPTED,     // The CHLO was accepted
     REJECTED,     // The CHLO was rejected.
   };
 
   StatelessRejector(QuicVersion version,
                     const QuicVersionVector& versions,
                     const QuicCryptoServerConfig* crypto_config,
                     QuicCompressedCertsCache* compressed_certs_cache,
                     const QuicClock* clock,
                     QuicRandom* random,
+                    QuicByteCount chlo_packet_size,
                     const IPEndPoint& client_address,
                     const IPEndPoint& server_address);
 
   ~StatelessRejector();
 
   // Called when |chlo| is received for |connection_id| to determine
   // if it should be statelessly rejected.
   void OnChlo(QuicVersion version,
               QuicConnectionId connection_id,
               QuicConnectionId server_designated_connection_id,
@@ skipping 21 matching lines @@
       const CryptoHandshakeMessage& client_hello,
       const ValidateClientHelloResultCallback::Result& result);
 
   State state_;
   QuicErrorCode error_;
   std::string error_details_;
   QuicVersion version_;
   QuicVersionVector versions_;
   QuicConnectionId connection_id_;
   QuicConnectionId server_designated_connection_id_;
+  QuicByteCount chlo_packet_size_;
   IPEndPoint client_address_;
   IPEndPoint server_address_;
   const QuicClock* clock_;
   QuicRandom* random_;
   const QuicCryptoServerConfig* crypto_config_;
   QuicCompressedCertsCache* compressed_certs_cache_;
   const CryptoHandshakeMessage* chlo_;
   CryptoHandshakeMessage reply_;
   CryptoFramer crypto_framer_;
   QuicCryptoProof proof_;
 
   DISALLOW_COPY_AND_ASSIGN(StatelessRejector);
 };
 
 }  // namespace net
 
 #endif  // NET_QUIC_STATELESS_REJECTOR_H_