From 02139a47433ef80171500eca80c0f87b1c8e1c46 Mon Sep 17 00:00:00 2001
From: Marten Seemann <martenseemann@gmail.com>
Date: Fri, 11 Dec 2020 12:13:21 +0700
Subject: [PATCH] delete the slice of undecrytable packets when the handshake
 completes

---
 session.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/session.go b/session.go
index 43bf0f433..809b02b7e 100644
--- a/session.go
+++ b/session.go
@@ -675,6 +675,9 @@ func (s *session) handleHandshakeComplete() {
 	s.handshakeComplete = true
 	s.handshakeCompleteChan = nil // prevent this case from ever being selected again
 	s.handshakeCtxCancel()
+	// Once the handshake completes, we have derived 1-RTT keys.
+	// There's no point in queueing undecryptable packets for later decryption any more.
+	s.undecryptablePackets = nil
 
 	s.connIDManager.SetHandshakeComplete()
 	s.connIDGenerator.SetHandshakeComplete()