Header::from_bytes() does not validate the QUIC fixed bit (0x40) on received packets. The bit is currently only set when encoding outgoing packets.
RFC 9000 requires packets with a cleared fixed bit to be discarded. Encrypted packets will generally fail authentication later, but this unnecessarily reaches the crypto path.
Header::from_bytes()does not validate the QUIC fixed bit (0x40) on received packets. The bit is currently only set when encoding outgoing packets.RFC 9000 requires packets with a cleared fixed bit to be discarded. Encrypted packets will generally fail authentication later, but this unnecessarily reaches the crypto path.