Merge branch 'main' into feat-inplace-crypto

.github/workflows/check.yml

@@ -120,6 +120,7 @@ jobs:
         if: matrix.type == 'debug' && matrix.rust-toolchain == 'nightly'
 
       - uses: codecov/test-results-action@4e79e65778be1cecd5df25e14af1eafb6df80ea9 # v1.0.2
+        if: always()
         with:
           files: target/nextest/ci/junit.xml
           fail_ci_if_error: false

neqo-transport/src/connection/mod.rs

@@ -1680,7 +1680,6 @@ impl Connection {
                     self.check_stateless_reset(path, packet.data(), dcid.is_none(), now)?;
                     self.stats.borrow_mut().pkt_dropped("Decryption failure");
                     qlog::packet_dropped(&self.qlog, &packet, now);
-                    break;
                 }
             }
             slc = remainder;

neqo-transport/src/packet/mod.rs

@@ -890,7 +890,7 @@ impl<'a> PublicPacket<'a> {
                 return Err(Error::DecryptError);
             };
             let version = rx.version(); // Version fixup; see above.
-            let len = rx.decrypt_in_place(pn, header, body, self.data)?;
+            let len = rx.decrypt_in_place(pn, header.clone(), body, self.data)?;
             // If this is the first packet ever successfully decrypted
             // using `rx`, make sure to initiate a key update.
             if rx.needs_update() {
@@ -901,7 +901,7 @@ impl<'a> PublicPacket<'a> {
                 version,
                 pt: self.packet_type,
                 pn,
-                data: &self.data[self.header_len + 1..self.header_len + 1 + len],
+                data: &self.data[header.end..header.end + len],
             })
         } else if crypto.rx_pending(cspace) {
             Err(Error::KeysPending(cspace))