From c8626d89e569f22225d1b811a6be8a3a54b859e7 Mon Sep 17 00:00:00 2001
From: Marten Seemann <martenseemann@gmail.com>
Date: Fri, 11 Dec 2020 12:17:04 +0700
Subject: [PATCH] assert that no undecryptable packets are queueud after the
 handshake

---
 session.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/session.go b/session.go
index 809b02b7e..a43a7c113 100644
--- a/session.go
+++ b/session.go
@@ -1674,6 +1674,9 @@ func (s *session) scheduleSending() {
 }
 
 func (s *session) tryQueueingUndecryptablePacket(p *receivedPacket, hdr *wire.Header) {
+	if s.handshakeComplete {
+		panic("shouldn't queue undecryptable packets after handshake completion")
+	}
 	if len(s.undecryptablePackets)+1 > protocol.MaxUndecryptablePackets {
 		if s.tracer != nil {
 			s.tracer.DroppedPacket(logging.PacketTypeFromHeader(hdr), p.Size(), logging.PacketDropDOSPrevention)