Sunwoo Lee 275dab58f0 quic: remove unused scid from port_default_packet_handler ...

Remove the scid variable entirely from port_default_packet_handler()
  and all functions that accept it as a parameter. The scid was never
  used meaningfully — cur_remote_dcid is set later during the handshake.

  Remove scid parameter from:
    - port_bind_channel()
    - port_validate_token()
    - ossl_quic_channel_on_new_conn()
    - ossl_quic_bind_channel()
    - ch_on_new_conn_common()

  Remove the cur_remote_dcid = *peer_scid assignment in
  ch_on_new_conn_common() as it wrote dead data.

  CWE-457

  Reported-by: Sunwoo Lee <sunwoolee@kentech.ac.kr>

  CLA: trivial

Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
MergeDate: Wed Apr  8 10:21:55 2026
(Merged from https://github.com/openssl/openssl/pull/30611)

2026-04-08 12:21:44 +02:00

..

crypto

ML_DSA/ML_KEM: Add fromdata property query support.

2026-03-13 18:24:40 +01:00

internal

quic: remove unused scid from port_default_packet_handler

2026-04-08 12:21:44 +02:00

openssl

Deprecate EVP_CIPHER_CTX_get_num() and EVP_CIPHER_CTX_set_num().

2026-04-08 12:02:56 +02:00