quic

Nov 3, 2026

Changes in this version

type Config

+ RequireStreamCreditRelease bool

type ConnectionState

+ RequireStreamCreditRelease bool

type ReceiveStream

+ func (s *ReceiveStream) ReleaseStreamCredit()

type Stream

+ func (s *Stream) ReleaseStreamCredit()

Oct 16, 2026

Changes in this version

+ var ErrStreamClosed = errors.New("stream closed")

type ConnectionStats

+ CongestionWindow uint64

Aug 30, 2026

Changes in this version

type SendStream

+ func (s *SendStream) SetPriority(urgency int8, incremental bool)

type Stream

+ func (s *Stream) SetPriority(urgency int8, incremental bool)

Jul 21, 2026

Changes in this version

+ var ErrWouldBlock = errors.New("operation would block")

+ var ErrWriteLimitReached = errors.New("write limit reached")

type ReceiveStream

+ func (s *ReceiveStream) SetReceiveFinalSizeCallback(callback func(int64))

type SendStream

+ func (s *SendStream) TryWriteAll(p []byte) error

+ func (s *SendStream) WriteWithLimit(p []byte, limiter func(maxBytes int) int) (int, error)

type Stream

+ func (s *Stream) SetReceiveFinalSizeCallback(callback func(int64))

+ func (s *Stream) TryWriteAll(p []byte) error

+ func (s *Stream) WriteWithLimit(p []byte, limiter func(maxBytes int) int) (int, error)

Jan 11, 2026 GO-2026-5676

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

type ReceiveStream

+ func (s *ReceiveStream) Peek(b []byte) (int, error)

type Stream

+ func (s *Stream) Peek(b []byte) (int, error)

+ func (s *Stream) SetReliableBoundary()

Jan 11, 2026 GO-2026-5676

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Dec 21, 2025 GO-2026-5676

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Nov 26, 2025 GO-2026-5676

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Nov 21, 2025 GO-2026-5676

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Nov 4, 2025 GO-2025-4233 +1 more

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

type Conn

+ func (c *Conn) QlogTrace() qlogwriter.Trace

Oct 3, 2025 GO-2025-4233 +1 more

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

type Conn

+ func (c *Conn) ConnectionStats() ConnectionStats

+ type ConnectionStats struct

+ BytesLost uint64

+ BytesReceived uint64

+ BytesSent uint64

+ LatestRTT time.Duration

+ MeanDeviation time.Duration

+ MinRTT time.Duration

+ PacketsLost uint64

+ PacketsReceived uint64

+ PacketsSent uint64

+ SmoothedRTT time.Duration

Sep 25, 2025 GO-2025-4233 +1 more

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Jul 20, 2025 GO-2025-4017 +2 more

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

type Config

+ EnableStreamResetPartialDelivery bool

type ConnectionState

+ SupportsStreamResetPartialDelivery bool

type SendStream

+ func (s *SendStream) SetReliableBoundary()

type Version

+ func SupportedVersions() []Version

Jun 24, 2025 GO-2025-4017 +2 more

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

+ type Conn struct

+ func (c *Conn) AcceptStream(ctx context.Context) (*Stream, error)

+ func (c *Conn) AcceptUniStream(ctx context.Context) (*ReceiveStream, error)

+ func (c *Conn) AddPath(t *Transport) (*Path, error)

+ func (c *Conn) CloseWithError(code ApplicationErrorCode, desc string) error

+ func (c *Conn) ConnectionState() ConnectionState

+ func (c *Conn) Context() context.Context

+ func (c *Conn) HandshakeComplete() <-chan struct{}

+ func (c *Conn) LocalAddr() net.Addr

+ func (c *Conn) NextConnection(ctx context.Context) (*Conn, error)

+ func (c *Conn) OpenStream() (*Stream, error)

+ func (c *Conn) OpenStreamSync(ctx context.Context) (*Stream, error)

+ func (c *Conn) OpenUniStream() (*SendStream, error)

+ func (c *Conn) OpenUniStreamSync(ctx context.Context) (*SendStream, error)

+ func (c *Conn) ReceiveDatagram(ctx context.Context) ([]byte, error)

+ func (c *Conn) RemoteAddr() net.Addr

+ func (c *Conn) SendDatagram(p []byte) error

type ReceiveStream

+ func (s *ReceiveStream) Read(p []byte) (int, error)

type SendStream

+ func (s *SendStream) Close() error

+ func (s *SendStream) Write(p []byte) (int, error)

type Stream

+ func (s *Stream) Close() error

+ func (s *Stream) Read(p []byte) (int, error)

+ func (s *Stream) Write(p []byte) (int, error)

May 20, 2025 GO-2025-4017 +2 more

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Apr 20, 2025 GO-2025-4017 +2 more

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

+ var ErrPathClosed = errors.New("path closed")

+ var ErrPathNotValidated = errors.New("path not yet validated")

+ type ClientInfo struct

+ AddrVerified bool

+ RemoteAddr net.Addr

type Connection

+ AddPath func(*Transport) (*Path, error)

+ type Path struct

+ func (p *Path) Close() error

+ func (p *Path) Probe(ctx context.Context) error

+ func (p *Path) Switch() error

Mar 21, 2025 GO-2025-4017 +2 more

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Feb 16, 2025 GO-2025-3735 +3 more

  GO-2025-3735: Panic in Path Probe Loss Recovery Handling in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Sep 25, 2025 GO-2025-4233 +1 more

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Jan 23, 2025 GO-2025-4017 +2 more

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

+ var ErrTransportClosed = &errTransportClosed

Nov 26, 2024 GO-2025-4017 +2 more

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Oct 22, 2024 GO-2024-3302 +3 more

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Oct 15, 2024 GO-2024-3302 +3 more

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Sep 8, 2024 GO-2024-3302 +3 more

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Aug 7, 2024 GO-2024-3302 +3 more

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

+ type StreamLimitReachedError struct

+ func (e StreamLimitReachedError) Error() string

Aug 1, 2024 GO-2024-3302 +3 more

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Jun 23, 2024 GO-2024-3302 +3 more

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Jun 6, 2024 GO-2024-3302 +3 more

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

type Transport

+ ConnContext func(context.Context) context.Context

May 19, 2024 GO-2024-3302 +3 more

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

type Config

+ InitialPacketSize uint16

May 3, 2024 GO-2024-3302 +3 more

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Apr 27, 2024 GO-2024-3302 +3 more

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

+ type ConnectionTracingID uint64

type DatagramTooLargeError

+ MaxDatagramPayloadSize int64

Mar 18, 2024 GO-2024-3302 +3 more

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

type ClientHelloInfo

+ AddrVerified bool

type Transport

+ VerifySourceAddress func(net.Addr) bool

+ type Version = protocol.Version

Jan 17, 2024 GO-2024-2682 +4 more

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

+ type DatagramTooLargeError struct

+ PeerMaxDatagramFrameSize int64

+ func (e *DatagramTooLargeError) Error() string

+ func (e *DatagramTooLargeError) Is(target error) bool

Dec 13, 2023 GO-2024-2682 +4 more

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Oct 28, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

type Connection

+ ReceiveDatagram func(context.Context) ([]byte, error)

+ SendDatagram func([]byte) error

Dec 13, 2023 GO-2024-2682 +4 more

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Oct 27, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Oct 25, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Oct 17, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Sep 24, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

type ConnectionState

+ GSO bool

+ type TokenGeneratorKey = handshake.TokenProtectorKey

type Transport

+ DisableVersionNegotiationPackets bool

+ MaxTokenAge time.Duration

+ TokenGeneratorKey *TokenGeneratorKey

Dec 13, 2023 GO-2024-2682 +4 more

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Aug 25, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Aug 21, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

type Transport

+ func (t *Transport) ReadNonQUICPacket(ctx context.Context, b []byte) (int, net.Addr, error)

Dec 13, 2023 GO-2024-2682 +4 more

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Aug 19, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Aug 17, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Aug 9, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Aug 5, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Aug 4, 2023 GO-2023-2160 +6 more

  GO-2023-2160: Panic during QUIC handshake in github.com/quic-go/quic-go

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Jul 31, 2023 GO-2023-2160 +6 more

  GO-2023-2160: Panic during QUIC handshake in github.com/quic-go/quic-go

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Jul 21, 2023 GO-2023-2160 +6 more

  GO-2023-2160: Panic during QUIC handshake in github.com/quic-go/quic-go

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

type ConnectionState

+ Used0RTT bool

type Transport

+ func (t *Transport) WriteTo(b []byte, addr net.Addr) (int, error)

Aug 6, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Aug 2, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Jul 12, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Jul 1, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Jun 21, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

+ const UDP_SEGMENT — linux/amd64

+ func OptimizeConn(c net.PacketConn) (net.PacketConn, error)

type OOBCapablePacketConn

+ SetReadBuffer func(int) error

Jun 1, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

May 28, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

+ type ClientHelloInfo struct

+ RemoteAddr net.Addr

type Config

+ GetConfigForClient func(info *ClientHelloInfo) (*Config, error)

+ type Transport struct

+ Conn net.PacketConn

+ ConnectionIDGenerator ConnectionIDGenerator

+ ConnectionIDLength int

+ StatelessResetKey *StatelessResetKey

+ Tracer logging.Tracer

+ func (t *Transport) Close() error

+ func (t *Transport) Dial(ctx context.Context, addr net.Addr, tlsConf *tls.Config, conf *Config) (Connection, error)

+ func (t *Transport) DialEarly(ctx context.Context, addr net.Addr, tlsConf *tls.Config, conf *Config) (EarlyConnection, error)

+ func (t *Transport) Listen(tlsConf *tls.Config, conf *Config) (*Listener, error)

+ func (t *Transport) ListenEarly(tlsConf *tls.Config, conf *Config) (*EarlyListener, error)

Apr 19, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

+ var QUICVersionContextKey = handshake.QUICVersionContextKey

Aug 6, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Feb 21, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Feb 2, 2023 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

+ const AEADLimitReached

+ const ApplicationErrorErrorCode

+ const ConnectionIDLimitError

+ const ConnectionRefused

+ const CryptoBufferExceeded

+ const FinalSizeError

+ const FlowControlError

+ const FrameEncodingError

+ const IPV6_DONTFRAG — windows/amd64

+ const IP_DONTFRAGMENT — windows/amd64

+ const InternalError

+ const InvalidToken

+ const KeyUpdateError

+ const NoError

+ const NoViablePathError

+ const ProtocolViolation

+ const StreamLimitError

+ const StreamStateError

+ const TransportParameterError

+ const Version1

+ const Version2

+ const VersionDraft29

+ var ConnectionTracingKey = connTracingCtxKey

+ var Err0RTTRejected = errors.New("0-RTT rejected")

+ var ErrServerClosed = errors.New("quic: Server closed")

+ type ApplicationError = qerr.ApplicationError

+ type ApplicationErrorCode = qerr.ApplicationErrorCode

+ type ClientToken struct

type Config

+ Allow0RTT func(net.Addr) bool

+ AllowConnectionWindowIncrease func(conn Connection, delta uint64) bool

+ ConnectionIDGenerator ConnectionIDGenerator

+ DisablePathMTUDiscovery bool

+ DisableVersionNegotiationPackets bool

+ EnableDatagrams bool

+ HandshakeIdleTimeout time.Duration

+ InitialConnectionReceiveWindow uint64

+ InitialStreamReceiveWindow uint64

+ KeepAlivePeriod time.Duration

+ MaxConnectionReceiveWindow uint64

+ MaxIdleTimeout time.Duration

+ MaxRetryTokenAge time.Duration

+ MaxStreamReceiveWindow uint64

+ MaxTokenAge time.Duration

+ RequireAddressValidation func(net.Addr) bool

+ StatelessResetKey *StatelessResetKey

+ TokenStore TokenStore

+ Tracer logging.Tracer

+ func (c *Config) Clone() *Config

+ type Connection interface

+ AcceptStream func(context.Context) (Stream, error)

+ AcceptUniStream func(context.Context) (ReceiveStream, error)

+ CloseWithError func(ApplicationErrorCode, string) error

+ ConnectionState func() ConnectionState

+ Context func() context.Context

+ LocalAddr func() net.Addr

+ OpenStream func() (Stream, error)

+ OpenStreamSync func(context.Context) (Stream, error)

+ OpenUniStream func() (SendStream, error)

+ OpenUniStreamSync func(context.Context) (SendStream, error)

+ ReceiveMessage func() ([]byte, error)

+ RemoteAddr func() net.Addr

+ SendMessage func([]byte) error

+ type ConnectionID = protocol.ConnectionID

+ func ConnectionIDFromBytes(b []byte) ConnectionID

+ type ConnectionIDGenerator interface

+ ConnectionIDLen func() int

+ GenerateConnectionID func() (ConnectionID, error)

type ConnectionState

+ SupportsDatagrams bool

+ TLS handshake.ConnectionState

+ Version VersionNumber

+ type EarlyConnection interface

+ HandshakeComplete func() context.Context

+ NextConnection func() Connection

+ func DialAddrEarly(addr string, tlsConf *tls.Config, config *Config) (EarlyConnection, error)

+ func DialAddrEarlyContext(ctx context.Context, addr string, tlsConf *tls.Config, config *Config) (EarlyConnection, error)

+ func DialEarly(pconn net.PacketConn, remoteAddr net.Addr, host string, tlsConf *tls.Config, ...) (EarlyConnection, error)

+ func DialEarlyContext(ctx context.Context, pconn net.PacketConn, remoteAddr net.Addr, host string, ...) (EarlyConnection, error)

+ type EarlyListener interface

+ Accept func(context.Context) (EarlyConnection, error)

+ Addr func() net.Addr

+ Close func() error

+ func ListenAddrEarly(addr string, tlsConf *tls.Config, config *Config) (EarlyListener, error)

+ func ListenEarly(conn net.PacketConn, tlsConf *tls.Config, config *Config) (EarlyListener, error)

+ type HandshakeTimeoutError = qerr.HandshakeTimeoutError

+ type IdleTimeoutError = qerr.IdleTimeoutError

+ type OOBCapablePacketConn interface

+ ReadMsgUDP func(b, oob []byte) (n, oobn, flags int, addr *net.UDPAddr, err error)

+ SyscallConn func() (syscall.RawConn, error)

+ WriteMsgUDP func(b, oob []byte, addr *net.UDPAddr) (n, oobn int, err error)

+ type StatelessResetError = qerr.StatelessResetError

+ type StatelessResetKey [32]byte

type StreamError

+ Remote bool

+ StreamID StreamID

+ func (e *StreamError) Error() string

+ func (e *StreamError) Is(target error) bool

+ type StreamErrorCode = qerr.StreamErrorCode

+ type TokenStore interface

+ Pop func(key string) (token *ClientToken)

+ Put func(key string, token *ClientToken)

+ func NewLRUTokenStore(maxOrigins, tokensPerOrigin int) TokenStore

+ type TransportError = qerr.TransportError

+ type TransportErrorCode = qerr.TransportErrorCode

+ type VersionNegotiationError = qerr.VersionNegotiationError

Jan 17, 2019 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Jan 17, 2019 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Aug 28, 2018 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

+ const VersionGQUIC44

+ const VersionMilestone0_10_0

Aug 31, 2018 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Aug 16, 2018 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

+ const VersionGQUIC42

+ const VersionGQUIC43

+ const VersionMilestone0_9_0

type Config

+ ConnectionIDLength int

type Session

+ CloseWithError func(ErrorCode, error) error

Jun 27, 2018 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

+ const VersionGQUIC39

+ const VersionMilestone0_8_0

type Config

+ MaxIncomingStreams int

+ MaxIncomingUniStreams int

type Session

+ func DialAddrContext(ctx context.Context, addr string, tlsConf *tls.Config, config *Config) (Session, error)

+ func DialContext(ctx context.Context, pconn net.PacketConn, remoteAddr net.Addr, host string, ...) (Session, error)

+ AcceptUniStream func() (ReceiveStream, error)

+ OpenUniStream func() (SendStream, error)

+ OpenUniStreamSync func() (SendStream, error)

Feb 3, 2018 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

+ type ConnectionState = handshake.ConnectionState

+ type ErrorCode = protocol.ApplicationErrorCode

+ type ReceiveStream interface

+ CancelRead func(ErrorCode) error

+ SetReadDeadline func(t time.Time) error

+ StreamID func() StreamID

+ type SendStream interface

+ CancelWrite func(ErrorCode) error

+ Context func() context.Context

+ SetWriteDeadline func(t time.Time) error

+ StreamID func() StreamID

type Session

+ ConnectionState func() ConnectionState

type Stream

+ CancelRead func(ErrorCode) error

+ CancelWrite func(ErrorCode) error

+ type StreamError interface

+ Canceled func() bool

+ ErrorCode func() ErrorCode

Dec 12, 2017 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

type Config

+ AcceptCookie func(clientAddr net.Addr, cookie *Cookie) bool

+ HandshakeTimeout time.Duration

+ IdleTimeout time.Duration

+ KeepAlive bool

+ MaxReceiveConnectionFlowControlWindow uint64

+ MaxReceiveStreamFlowControlWindow uint64

+ RequestConnectionIDOmission bool

+ Versions []VersionNumber

+ type Cookie = handshake.Cookie

type Listener

+ Accept func() (Session, error)

+ type NonFWSession interface

+ WaitUntilHandshakeComplete func() error

+ func DialAddrNonFWSecure(addr string, tlsConf *tls.Config, config *Config) (NonFWSession, error)

+ func DialNonFWSecure(pconn net.PacketConn, remoteAddr net.Addr, host string, tlsConf *tls.Config, ...) (NonFWSession, error)

type Session

+ Context func() context.Context

type Stream

+ Context func() context.Context

+ SetDeadline func(t time.Time) error

+ SetReadDeadline func(t time.Time) error

+ SetWriteDeadline func(t time.Time) error

+ type StreamID = protocol.StreamID

+ type VersionNumber = protocol.VersionNumber

Apr 11, 2017 GO-2024-2459 +5 more

  GO-2024-2459: Denial of service via path validation in github.com/quic-go/quic-go

  GO-2024-2682: Denial of service via connection starvation in github.com/quic-go/quic-go

  GO-2024-3302: ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go

  GO-2025-4017: Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

  GO-2025-4233: HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go

  GO-2026-5676: HTTP/3 QPACK Trailer Expansion Memory Exhaustion in github.com/quic-go/quic-go

Changes in this version

+ type Config struct

+ ConnState ConnStateCallback

+ TLSConfig *tls.Config

+ type ConnState int

+ const ConnStateForwardSecure

+ const ConnStateInitial

+ const ConnStateSecure

+ const ConnStateVersionNegotiated

+ type ConnStateCallback func(Session, ConnState)

+ type Listener interface

+ Addr func() net.Addr

+ Close func() error

+ Serve func() error

+ func Listen(conn net.PacketConn, config *Config) (Listener, error)

+ func ListenAddr(addr string, config *Config) (Listener, error)

+ type PublicHeader struct

+ ConnectionID protocol.ConnectionID

+ DiversificationNonce []byte

+ PacketNumber protocol.PacketNumber

+ PacketNumberLen protocol.PacketNumberLen

+ Raw []byte

+ ResetFlag bool

+ SupportedVersions []protocol.VersionNumber

+ TruncateConnectionID bool

+ VersionFlag bool

+ VersionNumber protocol.VersionNumber

+ func ParsePublicHeader(b *bytes.Reader, packetSentBy protocol.Perspective) (*PublicHeader, error)

+ func (h *PublicHeader) GetLength(pers protocol.Perspective) (protocol.ByteCount, error)

+ func (h *PublicHeader) Write(b *bytes.Buffer, version protocol.VersionNumber, pers protocol.Perspective) error

+ type Session interface

+ AcceptStream func() (Stream, error)

+ Close func(error) error

+ LocalAddr func() net.Addr

+ OpenStream func() (Stream, error)

+ OpenStreamSync func() (Stream, error)

+ RemoteAddr func() net.Addr

+ func Dial(pconn net.PacketConn, remoteAddr net.Addr, host string, config *Config) (Session, error)

+ func DialAddr(addr string, config *Config) (Session, error)

+ type Stream interface

+ Reset func(error)

+ StreamID func() protocol.StreamID