deps: update ngtcp2 to 1.24.0

PR-URL: #64297
Backport-PR-URL: #64675
Reviewed-By: Tim Perry <pimterry@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>

Author: nodejs-github-bot

deps/ngtcp2/ngtcp2.gyp

@@ -49,7 +49,7 @@
 'ngtcp2/lib/ngtcp2_unreachable.c',
 'ngtcp2/lib/ngtcp2_vec.c',
 'ngtcp2/lib/ngtcp2_version.c',
-'ngtcp2/lib/ngtcp2_window_filter.c',
+'ngtcp2/lib/ngtcp2_wf.c',
 'ngtcp2/crypto/shared.c'
  ],
 'ngtcp2_sources_ossl': [

deps/ngtcp2/ngtcp2/crypto/includes/ngtcp2/ngtcp2_crypto_ossl.h

@@ -145,6 +145,18 @@ NGTCP2_EXTERN SSL *ngtcp2_crypto_ossl_ctx_get_ssl(ngtcp2_crypto_ossl_ctx *ctx);
  */
 NGTCP2_EXTERNintngtcp2_crypto_ossl_init(void);
 
+/**
+ * @function
+ *
+ * `ngtcp2_crypto_ossl_free` frees the resources allocated by
+ * `ngtcp2_crypto_ossl_init`. It is safe to call this function even
+ * if `ngtcp2_crypto_ossl_init` fails or is not called at all. This
+ * function might be useful to make some leak detection tools happy.
+ *
+ * .. version-added:: 1.24.0
+ */
+NGTCP2_EXTERNvoidngtcp2_crypto_ossl_free(void);
+
 /**
  * @function
  *

deps/ngtcp2/ngtcp2/crypto/ossl/ossl.c

@@ -79,6 +79,60 @@ int ngtcp2_crypto_ossl_init(void) {
 return0;
 }
 
+voidngtcp2_crypto_ossl_free(void) {
+if (crypto_hkdf) {
+EVP_KDF_free(crypto_hkdf);
+crypto_hkdf=NULL;
+ }
+
+if (crypto_sha384) {
+EVP_MD_free(crypto_sha384);
+crypto_sha384=NULL;
+ }
+
+if (crypto_sha256) {
+EVP_MD_free(crypto_sha256);
+crypto_sha256=NULL;
+ }
+
+#ifndefNGTCP2_NO_CHACHA_POLY1305
+if (crypto_chacha20) {
+EVP_CIPHER_free(crypto_chacha20);
+crypto_chacha20=NULL;
+ }
+
+if (crypto_chacha20_poly1305) {
+EVP_CIPHER_free(crypto_chacha20_poly1305);
+crypto_chacha20_poly1305=NULL;
+ }
+#endif/* !defined(NGTCP2_NO_CHACHA_POLY1305) */
+
+if (crypto_aes_256_ecb) {
+EVP_CIPHER_free(crypto_aes_256_ecb);
+crypto_aes_256_ecb=NULL;
+ }
+
+if (crypto_aes_128_ecb) {
+EVP_CIPHER_free(crypto_aes_128_ecb);
+crypto_aes_128_ecb=NULL;
+ }
+
+if (crypto_aes_128_ccm) {
+EVP_CIPHER_free(crypto_aes_128_ccm);
+crypto_aes_128_ccm=NULL;
+ }
+
+if (crypto_aes_256_gcm) {
+EVP_CIPHER_free(crypto_aes_256_gcm);
+crypto_aes_256_gcm=NULL;
+ }
+
+if (crypto_aes_128_gcm) {
+EVP_CIPHER_free(crypto_aes_128_gcm);
+crypto_aes_128_gcm=NULL;
+ }
+}
+
 staticconstEVP_CIPHER*crypto_aead_aes_128_gcm(void) {
 if (crypto_aes_128_gcm) {
 returncrypto_aes_128_gcm;

deps/ngtcp2/ngtcp2/examples/http3_server_proto_codec.cc

@@ -603,9 +603,9 @@ std::expected<void, Error> ProtoCodec::start_response(Stream *stream) {
  nghttp3_pri pri;
 
 if (auto rv =
-nghttp3_conn_get_stream_priority(httpconn_, &pri, stream->stream_id);
+nghttp3_conn_get_stream_priority2(httpconn_, &pri, stream->stream_id);
  rv != 0) {
-std::println(stderr, "nghttp3_conn_get_stream_priority: {}",
+std::println(stderr, "nghttp3_conn_get_stream_priority2: {}",
 nghttp3_strerror(rv));
 return std::unexpected{Error::HTTP3};
  }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.cc

@@ -36,23 +36,16 @@
 #include"client_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSClientContext::TLSClientContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSClientContext::~TLSClientContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSClientContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSClientContext {
 public:
-TLSClientContext() = default;
+TLSClientContext();
 ~TLSClientContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.cc

@@ -37,23 +37,16 @@
 #include"server_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSServerContext::TLSServerContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSServerContext::~TLSServerContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSServerContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSServerContext {
 public:
-TLSServerContext() = default;
+TLSServerContext();
 ~TLSServerContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/ngtcp2.h

@@ -3485,6 +3485,24 @@ typedef int (*ngtcp2_stream_stop_sending)(ngtcp2_conn *conn, int64_t stream_id,
 void*user_data,
 void*stream_user_data);
 
+/**
+ * @functypedef
+ *
+ * :type:`ngtcp2_recv_stop_sending` is invoked when a STOP_SENDING frame
+ * is received from a remote endpoint for a stream identified by
+ * |stream_id|. |app_error_code| is the application error code carried
+ * by the STOP_SENDING frame. This callback is called at most
+ * once per stream.
+ *
+ * The callback function must return 0 if it succeeds. Returning
+ * :macro:`NGTCP2_ERR_CALLBACK_FAILURE` makes the library call return
+ * immediately.
+ */
+typedefint (*ngtcp2_recv_stop_sending)(ngtcp2_conn*conn, int64_tstream_id,
+uint64_tapp_error_code,
+void*user_data,
+void*stream_user_data);
+
 /**
  * @functypedef
  *
@@ -3626,7 +3644,8 @@ typedef int (*ngtcp2_get_path_challenge_data2)(ngtcp2_conn *conn,
 #defineNGTCP2_CALLBACKS_V1 1
 #defineNGTCP2_CALLBACKS_V2 2
 #defineNGTCP2_CALLBACKS_V3 3
-#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V3
+#defineNGTCP2_CALLBACKS_V4 4
+#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V4
 
 /**
  * @struct
@@ -3964,6 +3983,16 @@ typedef struct ngtcp2_callbacks {
  * .. version-added:: 1.22.0
  */
 ngtcp2_get_path_challenge_data2get_path_challenge_data2;
+/* The following fields have been added since
+ NGTCP2_CALLBACKS_V3. */
+/**
+ * :member:`recv_stop_sending` is a callback function which is invoked
+ * when a STOP_SENDING frame is received from a remote endpoint. This
+ * callback function is optional.
+ *
+ * .. version-added:: 1.24.0
+ */
+ngtcp2_recv_stop_sendingrecv_stop_sending;
 } ngtcp2_callbacks;
 
 /**

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/version.h

@@ -36,7 +36,7 @@
  *
  * Version number of the ngtcp2 library release.
  */
-#defineNGTCP2_VERSION "1.23.0"
+#defineNGTCP2_VERSION "1.24.0"
 
 /**
  * @macro
@@ -46,6 +46,6 @@
  * number, 8 bits for minor and 8 bits for patch. Version 1.2.3
  * becomes 0x010203.
  */
-#defineNGTCP2_VERSION_NUM0x011700
+#defineNGTCP2_VERSION_NUM0x011800
 
 #endif/* !defined(NGTCP2_VERSION_H) */

deps/ngtcp2/ngtcp2.gyp

@@ -49,7 +49,7 @@
 'ngtcp2/lib/ngtcp2_unreachable.c',
 'ngtcp2/lib/ngtcp2_vec.c',
 'ngtcp2/lib/ngtcp2_version.c',
-'ngtcp2/lib/ngtcp2_window_filter.c',
+'ngtcp2/lib/ngtcp2_wf.c',
 'ngtcp2/crypto/shared.c'
  ],
 'ngtcp2_sources_ossl': [

deps/ngtcp2/ngtcp2/crypto/includes/ngtcp2/ngtcp2_crypto_ossl.h

@@ -145,6 +145,18 @@ NGTCP2_EXTERN SSL *ngtcp2_crypto_ossl_ctx_get_ssl(ngtcp2_crypto_ossl_ctx *ctx);
  */
 NGTCP2_EXTERNintngtcp2_crypto_ossl_init(void);
 
+/**
+ * @function
+ *
+ * `ngtcp2_crypto_ossl_free` frees the resources allocated by
+ * `ngtcp2_crypto_ossl_init`. It is safe to call this function even
+ * if `ngtcp2_crypto_ossl_init` fails or is not called at all. This
+ * function might be useful to make some leak detection tools happy.
+ *
+ * .. version-added:: 1.24.0
+ */
+NGTCP2_EXTERNvoidngtcp2_crypto_ossl_free(void);
+
 /**
  * @function
  *

deps/ngtcp2/ngtcp2/crypto/ossl/ossl.c

@@ -79,6 +79,60 @@ int ngtcp2_crypto_ossl_init(void) {
 return0;
 }
 
+voidngtcp2_crypto_ossl_free(void) {
+if (crypto_hkdf) {
+EVP_KDF_free(crypto_hkdf);
+crypto_hkdf=NULL;
+ }
+
+if (crypto_sha384) {
+EVP_MD_free(crypto_sha384);
+crypto_sha384=NULL;
+ }
+
+if (crypto_sha256) {
+EVP_MD_free(crypto_sha256);
+crypto_sha256=NULL;
+ }
+
+#ifndefNGTCP2_NO_CHACHA_POLY1305
+if (crypto_chacha20) {
+EVP_CIPHER_free(crypto_chacha20);
+crypto_chacha20=NULL;
+ }
+
+if (crypto_chacha20_poly1305) {
+EVP_CIPHER_free(crypto_chacha20_poly1305);
+crypto_chacha20_poly1305=NULL;
+ }
+#endif/* !defined(NGTCP2_NO_CHACHA_POLY1305) */
+
+if (crypto_aes_256_ecb) {
+EVP_CIPHER_free(crypto_aes_256_ecb);
+crypto_aes_256_ecb=NULL;
+ }
+
+if (crypto_aes_128_ecb) {
+EVP_CIPHER_free(crypto_aes_128_ecb);
+crypto_aes_128_ecb=NULL;
+ }
+
+if (crypto_aes_128_ccm) {
+EVP_CIPHER_free(crypto_aes_128_ccm);
+crypto_aes_128_ccm=NULL;
+ }
+
+if (crypto_aes_256_gcm) {
+EVP_CIPHER_free(crypto_aes_256_gcm);
+crypto_aes_256_gcm=NULL;
+ }
+
+if (crypto_aes_128_gcm) {
+EVP_CIPHER_free(crypto_aes_128_gcm);
+crypto_aes_128_gcm=NULL;
+ }
+}
+
 staticconstEVP_CIPHER*crypto_aead_aes_128_gcm(void) {
 if (crypto_aes_128_gcm) {
 returncrypto_aes_128_gcm;

deps/ngtcp2/ngtcp2/examples/http3_server_proto_codec.cc

@@ -603,9 +603,9 @@ std::expected<void, Error> ProtoCodec::start_response(Stream *stream) {
  nghttp3_pri pri;
 
 if (auto rv =
-nghttp3_conn_get_stream_priority(httpconn_, &pri, stream->stream_id);
+nghttp3_conn_get_stream_priority2(httpconn_, &pri, stream->stream_id);
  rv != 0) {
-std::println(stderr, "nghttp3_conn_get_stream_priority: {}",
+std::println(stderr, "nghttp3_conn_get_stream_priority2: {}",
 nghttp3_strerror(rv));
 return std::unexpected{Error::HTTP3};
  }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.cc

@@ -36,23 +36,16 @@
 #include"client_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSClientContext::TLSClientContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSClientContext::~TLSClientContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSClientContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSClientContext {
 public:
-TLSClientContext() = default;
+TLSClientContext();
 ~TLSClientContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.cc

@@ -37,23 +37,16 @@
 #include"server_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSServerContext::TLSServerContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSServerContext::~TLSServerContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSServerContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSServerContext {
 public:
-TLSServerContext() = default;
+TLSServerContext();
 ~TLSServerContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/ngtcp2.h

@@ -3485,6 +3485,24 @@ typedef int (*ngtcp2_stream_stop_sending)(ngtcp2_conn *conn, int64_t stream_id,
 void*user_data,
 void*stream_user_data);
 
+/**
+ * @functypedef
+ *
+ * :type:`ngtcp2_recv_stop_sending` is invoked when a STOP_SENDING frame
+ * is received from a remote endpoint for a stream identified by
+ * |stream_id|. |app_error_code| is the application error code carried
+ * by the STOP_SENDING frame. This callback is called at most
+ * once per stream.
+ *
+ * The callback function must return 0 if it succeeds. Returning
+ * :macro:`NGTCP2_ERR_CALLBACK_FAILURE` makes the library call return
+ * immediately.
+ */
+typedefint (*ngtcp2_recv_stop_sending)(ngtcp2_conn*conn, int64_tstream_id,
+uint64_tapp_error_code,
+void*user_data,
+void*stream_user_data);
+
 /**
  * @functypedef
  *
@@ -3626,7 +3644,8 @@ typedef int (*ngtcp2_get_path_challenge_data2)(ngtcp2_conn *conn,
 #defineNGTCP2_CALLBACKS_V1 1
 #defineNGTCP2_CALLBACKS_V2 2
 #defineNGTCP2_CALLBACKS_V3 3
-#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V3
+#defineNGTCP2_CALLBACKS_V4 4
+#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V4
 
 /**
  * @struct
@@ -3964,6 +3983,16 @@ typedef struct ngtcp2_callbacks {
  * .. version-added:: 1.22.0
  */
 ngtcp2_get_path_challenge_data2get_path_challenge_data2;
+/* The following fields have been added since
+ NGTCP2_CALLBACKS_V3. */
+/**
+ * :member:`recv_stop_sending` is a callback function which is invoked
+ * when a STOP_SENDING frame is received from a remote endpoint. This
+ * callback function is optional.
+ *
+ * .. version-added:: 1.24.0
+ */
+ngtcp2_recv_stop_sendingrecv_stop_sending;
 } ngtcp2_callbacks;
 
 /**

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/version.h

@@ -36,7 +36,7 @@
  *
  * Version number of the ngtcp2 library release.
  */
-#defineNGTCP2_VERSION "1.23.0"
+#defineNGTCP2_VERSION "1.24.0"
 
 /**
  * @macro
@@ -46,6 +46,6 @@
  * number, 8 bits for minor and 8 bits for patch. Version 1.2.3
  * becomes 0x010203.
  */
-#defineNGTCP2_VERSION_NUM0x011700
+#defineNGTCP2_VERSION_NUM0x011800
 
 #endif/* !defined(NGTCP2_VERSION_H) */

deps/ngtcp2/ngtcp2.gyp

@@ -49,7 +49,7 @@
 'ngtcp2/lib/ngtcp2_unreachable.c',
 'ngtcp2/lib/ngtcp2_vec.c',
 'ngtcp2/lib/ngtcp2_version.c',
-'ngtcp2/lib/ngtcp2_window_filter.c',
+'ngtcp2/lib/ngtcp2_wf.c',
 'ngtcp2/crypto/shared.c'
  ],
 'ngtcp2_sources_ossl': [

deps/ngtcp2/ngtcp2/crypto/includes/ngtcp2/ngtcp2_crypto_ossl.h

@@ -145,6 +145,18 @@ NGTCP2_EXTERN SSL *ngtcp2_crypto_ossl_ctx_get_ssl(ngtcp2_crypto_ossl_ctx *ctx);
  */
 NGTCP2_EXTERNintngtcp2_crypto_ossl_init(void);
 
+/**
+ * @function
+ *
+ * `ngtcp2_crypto_ossl_free` frees the resources allocated by
+ * `ngtcp2_crypto_ossl_init`. It is safe to call this function even
+ * if `ngtcp2_crypto_ossl_init` fails or is not called at all. This
+ * function might be useful to make some leak detection tools happy.
+ *
+ * .. version-added:: 1.24.0
+ */
+NGTCP2_EXTERNvoidngtcp2_crypto_ossl_free(void);
+
 /**
  * @function
  *

deps/ngtcp2/ngtcp2/crypto/ossl/ossl.c

@@ -79,6 +79,60 @@ int ngtcp2_crypto_ossl_init(void) {
 return0;
 }
 
+voidngtcp2_crypto_ossl_free(void) {
+if (crypto_hkdf) {
+EVP_KDF_free(crypto_hkdf);
+crypto_hkdf=NULL;
+ }
+
+if (crypto_sha384) {
+EVP_MD_free(crypto_sha384);
+crypto_sha384=NULL;
+ }
+
+if (crypto_sha256) {
+EVP_MD_free(crypto_sha256);
+crypto_sha256=NULL;
+ }
+
+#ifndefNGTCP2_NO_CHACHA_POLY1305
+if (crypto_chacha20) {
+EVP_CIPHER_free(crypto_chacha20);
+crypto_chacha20=NULL;
+ }
+
+if (crypto_chacha20_poly1305) {
+EVP_CIPHER_free(crypto_chacha20_poly1305);
+crypto_chacha20_poly1305=NULL;
+ }
+#endif/* !defined(NGTCP2_NO_CHACHA_POLY1305) */
+
+if (crypto_aes_256_ecb) {
+EVP_CIPHER_free(crypto_aes_256_ecb);
+crypto_aes_256_ecb=NULL;
+ }
+
+if (crypto_aes_128_ecb) {
+EVP_CIPHER_free(crypto_aes_128_ecb);
+crypto_aes_128_ecb=NULL;
+ }
+
+if (crypto_aes_128_ccm) {
+EVP_CIPHER_free(crypto_aes_128_ccm);
+crypto_aes_128_ccm=NULL;
+ }
+
+if (crypto_aes_256_gcm) {
+EVP_CIPHER_free(crypto_aes_256_gcm);
+crypto_aes_256_gcm=NULL;
+ }
+
+if (crypto_aes_128_gcm) {
+EVP_CIPHER_free(crypto_aes_128_gcm);
+crypto_aes_128_gcm=NULL;
+ }
+}
+
 staticconstEVP_CIPHER*crypto_aead_aes_128_gcm(void) {
 if (crypto_aes_128_gcm) {
 returncrypto_aes_128_gcm;

deps/ngtcp2/ngtcp2/examples/http3_server_proto_codec.cc

@@ -603,9 +603,9 @@ std::expected<void, Error> ProtoCodec::start_response(Stream *stream) {
  nghttp3_pri pri;
 
 if (auto rv =
-nghttp3_conn_get_stream_priority(httpconn_, &pri, stream->stream_id);
+nghttp3_conn_get_stream_priority2(httpconn_, &pri, stream->stream_id);
  rv != 0) {
-std::println(stderr, "nghttp3_conn_get_stream_priority: {}",
+std::println(stderr, "nghttp3_conn_get_stream_priority2: {}",
 nghttp3_strerror(rv));
 return std::unexpected{Error::HTTP3};
  }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.cc

@@ -36,23 +36,16 @@
 #include"client_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSClientContext::TLSClientContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSClientContext::~TLSClientContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSClientContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSClientContext {
 public:
-TLSClientContext() = default;
+TLSClientContext();
 ~TLSClientContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.cc

@@ -37,23 +37,16 @@
 #include"server_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSServerContext::TLSServerContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSServerContext::~TLSServerContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSServerContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSServerContext {
 public:
-TLSServerContext() = default;
+TLSServerContext();
 ~TLSServerContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/ngtcp2.h

@@ -3485,6 +3485,24 @@ typedef int (*ngtcp2_stream_stop_sending)(ngtcp2_conn *conn, int64_t stream_id,
 void*user_data,
 void*stream_user_data);
 
+/**
+ * @functypedef
+ *
+ * :type:`ngtcp2_recv_stop_sending` is invoked when a STOP_SENDING frame
+ * is received from a remote endpoint for a stream identified by
+ * |stream_id|. |app_error_code| is the application error code carried
+ * by the STOP_SENDING frame. This callback is called at most
+ * once per stream.
+ *
+ * The callback function must return 0 if it succeeds. Returning
+ * :macro:`NGTCP2_ERR_CALLBACK_FAILURE` makes the library call return
+ * immediately.
+ */
+typedefint (*ngtcp2_recv_stop_sending)(ngtcp2_conn*conn, int64_tstream_id,
+uint64_tapp_error_code,
+void*user_data,
+void*stream_user_data);
+
 /**
  * @functypedef
  *
@@ -3626,7 +3644,8 @@ typedef int (*ngtcp2_get_path_challenge_data2)(ngtcp2_conn *conn,
 #defineNGTCP2_CALLBACKS_V1 1
 #defineNGTCP2_CALLBACKS_V2 2
 #defineNGTCP2_CALLBACKS_V3 3
-#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V3
+#defineNGTCP2_CALLBACKS_V4 4
+#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V4
 
 /**
  * @struct
@@ -3964,6 +3983,16 @@ typedef struct ngtcp2_callbacks {
  * .. version-added:: 1.22.0
  */
 ngtcp2_get_path_challenge_data2get_path_challenge_data2;
+/* The following fields have been added since
+ NGTCP2_CALLBACKS_V3. */
+/**
+ * :member:`recv_stop_sending` is a callback function which is invoked
+ * when a STOP_SENDING frame is received from a remote endpoint. This
+ * callback function is optional.
+ *
+ * .. version-added:: 1.24.0
+ */
+ngtcp2_recv_stop_sendingrecv_stop_sending;
 } ngtcp2_callbacks;
 
 /**

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/version.h

@@ -36,7 +36,7 @@
  *
  * Version number of the ngtcp2 library release.
  */
-#defineNGTCP2_VERSION "1.23.0"
+#defineNGTCP2_VERSION "1.24.0"
 
 /**
  * @macro
@@ -46,6 +46,6 @@
  * number, 8 bits for minor and 8 bits for patch. Version 1.2.3
  * becomes 0x010203.
  */
-#defineNGTCP2_VERSION_NUM0x011700
+#defineNGTCP2_VERSION_NUM0x011800
 
 #endif/* !defined(NGTCP2_VERSION_H) */

deps/ngtcp2/ngtcp2.gyp

@@ -49,7 +49,7 @@
 'ngtcp2/lib/ngtcp2_unreachable.c',
 'ngtcp2/lib/ngtcp2_vec.c',
 'ngtcp2/lib/ngtcp2_version.c',
-'ngtcp2/lib/ngtcp2_window_filter.c',
+'ngtcp2/lib/ngtcp2_wf.c',
 'ngtcp2/crypto/shared.c'
  ],
 'ngtcp2_sources_ossl': [

deps/ngtcp2/ngtcp2/crypto/includes/ngtcp2/ngtcp2_crypto_ossl.h

@@ -145,6 +145,18 @@ NGTCP2_EXTERN SSL *ngtcp2_crypto_ossl_ctx_get_ssl(ngtcp2_crypto_ossl_ctx *ctx);
  */
 NGTCP2_EXTERNintngtcp2_crypto_ossl_init(void);
 
+/**
+ * @function
+ *
+ * `ngtcp2_crypto_ossl_free` frees the resources allocated by
+ * `ngtcp2_crypto_ossl_init`. It is safe to call this function even
+ * if `ngtcp2_crypto_ossl_init` fails or is not called at all. This
+ * function might be useful to make some leak detection tools happy.
+ *
+ * .. version-added:: 1.24.0
+ */
+NGTCP2_EXTERNvoidngtcp2_crypto_ossl_free(void);
+
 /**
  * @function
  *

deps/ngtcp2/ngtcp2/crypto/ossl/ossl.c

@@ -79,6 +79,60 @@ int ngtcp2_crypto_ossl_init(void) {
 return0;
 }
 
+voidngtcp2_crypto_ossl_free(void) {
+if (crypto_hkdf) {
+EVP_KDF_free(crypto_hkdf);
+crypto_hkdf=NULL;
+ }
+
+if (crypto_sha384) {
+EVP_MD_free(crypto_sha384);
+crypto_sha384=NULL;
+ }
+
+if (crypto_sha256) {
+EVP_MD_free(crypto_sha256);
+crypto_sha256=NULL;
+ }
+
+#ifndefNGTCP2_NO_CHACHA_POLY1305
+if (crypto_chacha20) {
+EVP_CIPHER_free(crypto_chacha20);
+crypto_chacha20=NULL;
+ }
+
+if (crypto_chacha20_poly1305) {
+EVP_CIPHER_free(crypto_chacha20_poly1305);
+crypto_chacha20_poly1305=NULL;
+ }
+#endif/* !defined(NGTCP2_NO_CHACHA_POLY1305) */
+
+if (crypto_aes_256_ecb) {
+EVP_CIPHER_free(crypto_aes_256_ecb);
+crypto_aes_256_ecb=NULL;
+ }
+
+if (crypto_aes_128_ecb) {
+EVP_CIPHER_free(crypto_aes_128_ecb);
+crypto_aes_128_ecb=NULL;
+ }
+
+if (crypto_aes_128_ccm) {
+EVP_CIPHER_free(crypto_aes_128_ccm);
+crypto_aes_128_ccm=NULL;
+ }
+
+if (crypto_aes_256_gcm) {
+EVP_CIPHER_free(crypto_aes_256_gcm);
+crypto_aes_256_gcm=NULL;
+ }
+
+if (crypto_aes_128_gcm) {
+EVP_CIPHER_free(crypto_aes_128_gcm);
+crypto_aes_128_gcm=NULL;
+ }
+}
+
 staticconstEVP_CIPHER*crypto_aead_aes_128_gcm(void) {
 if (crypto_aes_128_gcm) {
 returncrypto_aes_128_gcm;

deps/ngtcp2/ngtcp2/examples/http3_server_proto_codec.cc

@@ -603,9 +603,9 @@ std::expected<void, Error> ProtoCodec::start_response(Stream *stream) {
  nghttp3_pri pri;
 
 if (auto rv =
-nghttp3_conn_get_stream_priority(httpconn_, &pri, stream->stream_id);
+nghttp3_conn_get_stream_priority2(httpconn_, &pri, stream->stream_id);
  rv != 0) {
-std::println(stderr, "nghttp3_conn_get_stream_priority: {}",
+std::println(stderr, "nghttp3_conn_get_stream_priority2: {}",
 nghttp3_strerror(rv));
 return std::unexpected{Error::HTTP3};
  }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.cc

@@ -36,23 +36,16 @@
 #include"client_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSClientContext::TLSClientContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSClientContext::~TLSClientContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSClientContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSClientContext {
 public:
-TLSClientContext() = default;
+TLSClientContext();
 ~TLSClientContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.cc

@@ -37,23 +37,16 @@
 #include"server_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSServerContext::TLSServerContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSServerContext::~TLSServerContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSServerContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSServerContext {
 public:
-TLSServerContext() = default;
+TLSServerContext();
 ~TLSServerContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/ngtcp2.h

@@ -3485,6 +3485,24 @@ typedef int (*ngtcp2_stream_stop_sending)(ngtcp2_conn *conn, int64_t stream_id,
 void*user_data,
 void*stream_user_data);
 
+/**
+ * @functypedef
+ *
+ * :type:`ngtcp2_recv_stop_sending` is invoked when a STOP_SENDING frame
+ * is received from a remote endpoint for a stream identified by
+ * |stream_id|. |app_error_code| is the application error code carried
+ * by the STOP_SENDING frame. This callback is called at most
+ * once per stream.
+ *
+ * The callback function must return 0 if it succeeds. Returning
+ * :macro:`NGTCP2_ERR_CALLBACK_FAILURE` makes the library call return
+ * immediately.
+ */
+typedefint (*ngtcp2_recv_stop_sending)(ngtcp2_conn*conn, int64_tstream_id,
+uint64_tapp_error_code,
+void*user_data,
+void*stream_user_data);
+
 /**
  * @functypedef
  *
@@ -3626,7 +3644,8 @@ typedef int (*ngtcp2_get_path_challenge_data2)(ngtcp2_conn *conn,
 #defineNGTCP2_CALLBACKS_V1 1
 #defineNGTCP2_CALLBACKS_V2 2
 #defineNGTCP2_CALLBACKS_V3 3
-#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V3
+#defineNGTCP2_CALLBACKS_V4 4
+#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V4
 
 /**
  * @struct
@@ -3964,6 +3983,16 @@ typedef struct ngtcp2_callbacks {
  * .. version-added:: 1.22.0
  */
 ngtcp2_get_path_challenge_data2get_path_challenge_data2;
+/* The following fields have been added since
+ NGTCP2_CALLBACKS_V3. */
+/**
+ * :member:`recv_stop_sending` is a callback function which is invoked
+ * when a STOP_SENDING frame is received from a remote endpoint. This
+ * callback function is optional.
+ *
+ * .. version-added:: 1.24.0
+ */
+ngtcp2_recv_stop_sendingrecv_stop_sending;
 } ngtcp2_callbacks;
 
 /**

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/version.h

@@ -36,7 +36,7 @@
  *
  * Version number of the ngtcp2 library release.
  */
-#defineNGTCP2_VERSION "1.23.0"
+#defineNGTCP2_VERSION "1.24.0"
 
 /**
  * @macro
@@ -46,6 +46,6 @@
  * number, 8 bits for minor and 8 bits for patch. Version 1.2.3
  * becomes 0x010203.
  */
-#defineNGTCP2_VERSION_NUM0x011700
+#defineNGTCP2_VERSION_NUM0x011800
 
 #endif/* !defined(NGTCP2_VERSION_H) */

deps/ngtcp2/ngtcp2.gyp

@@ -49,7 +49,7 @@
 'ngtcp2/lib/ngtcp2_unreachable.c',
 'ngtcp2/lib/ngtcp2_vec.c',
 'ngtcp2/lib/ngtcp2_version.c',
-'ngtcp2/lib/ngtcp2_window_filter.c',
+'ngtcp2/lib/ngtcp2_wf.c',
 'ngtcp2/crypto/shared.c'
  ],
 'ngtcp2_sources_ossl': [

deps/ngtcp2/ngtcp2/crypto/includes/ngtcp2/ngtcp2_crypto_ossl.h

@@ -145,6 +145,18 @@ NGTCP2_EXTERN SSL *ngtcp2_crypto_ossl_ctx_get_ssl(ngtcp2_crypto_ossl_ctx *ctx);
  */
 NGTCP2_EXTERNintngtcp2_crypto_ossl_init(void);
 
+/**
+ * @function
+ *
+ * `ngtcp2_crypto_ossl_free` frees the resources allocated by
+ * `ngtcp2_crypto_ossl_init`. It is safe to call this function even
+ * if `ngtcp2_crypto_ossl_init` fails or is not called at all. This
+ * function might be useful to make some leak detection tools happy.
+ *
+ * .. version-added:: 1.24.0
+ */
+NGTCP2_EXTERNvoidngtcp2_crypto_ossl_free(void);
+
 /**
  * @function
  *

deps/ngtcp2/ngtcp2/crypto/ossl/ossl.c

@@ -79,6 +79,60 @@ int ngtcp2_crypto_ossl_init(void) {
 return0;
 }
 
+voidngtcp2_crypto_ossl_free(void) {
+if (crypto_hkdf) {
+EVP_KDF_free(crypto_hkdf);
+crypto_hkdf=NULL;
+ }
+
+if (crypto_sha384) {
+EVP_MD_free(crypto_sha384);
+crypto_sha384=NULL;
+ }
+
+if (crypto_sha256) {
+EVP_MD_free(crypto_sha256);
+crypto_sha256=NULL;
+ }
+
+#ifndefNGTCP2_NO_CHACHA_POLY1305
+if (crypto_chacha20) {
+EVP_CIPHER_free(crypto_chacha20);
+crypto_chacha20=NULL;
+ }
+
+if (crypto_chacha20_poly1305) {
+EVP_CIPHER_free(crypto_chacha20_poly1305);
+crypto_chacha20_poly1305=NULL;
+ }
+#endif/* !defined(NGTCP2_NO_CHACHA_POLY1305) */
+
+if (crypto_aes_256_ecb) {
+EVP_CIPHER_free(crypto_aes_256_ecb);
+crypto_aes_256_ecb=NULL;
+ }
+
+if (crypto_aes_128_ecb) {
+EVP_CIPHER_free(crypto_aes_128_ecb);
+crypto_aes_128_ecb=NULL;
+ }
+
+if (crypto_aes_128_ccm) {
+EVP_CIPHER_free(crypto_aes_128_ccm);
+crypto_aes_128_ccm=NULL;
+ }
+
+if (crypto_aes_256_gcm) {
+EVP_CIPHER_free(crypto_aes_256_gcm);
+crypto_aes_256_gcm=NULL;
+ }
+
+if (crypto_aes_128_gcm) {
+EVP_CIPHER_free(crypto_aes_128_gcm);
+crypto_aes_128_gcm=NULL;
+ }
+}
+
 staticconstEVP_CIPHER*crypto_aead_aes_128_gcm(void) {
 if (crypto_aes_128_gcm) {
 returncrypto_aes_128_gcm;

deps/ngtcp2/ngtcp2/examples/http3_server_proto_codec.cc

@@ -603,9 +603,9 @@ std::expected<void, Error> ProtoCodec::start_response(Stream *stream) {
  nghttp3_pri pri;
 
 if (auto rv =
-nghttp3_conn_get_stream_priority(httpconn_, &pri, stream->stream_id);
+nghttp3_conn_get_stream_priority2(httpconn_, &pri, stream->stream_id);
  rv != 0) {
-std::println(stderr, "nghttp3_conn_get_stream_priority: {}",
+std::println(stderr, "nghttp3_conn_get_stream_priority2: {}",
 nghttp3_strerror(rv));
 return std::unexpected{Error::HTTP3};
  }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.cc

@@ -36,23 +36,16 @@
 #include"client_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSClientContext::TLSClientContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSClientContext::~TLSClientContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSClientContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSClientContext {
 public:
-TLSClientContext() = default;
+TLSClientContext();
 ~TLSClientContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.cc

@@ -37,23 +37,16 @@
 #include"server_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSServerContext::TLSServerContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSServerContext::~TLSServerContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSServerContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSServerContext {
 public:
-TLSServerContext() = default;
+TLSServerContext();
 ~TLSServerContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/ngtcp2.h

@@ -3485,6 +3485,24 @@ typedef int (*ngtcp2_stream_stop_sending)(ngtcp2_conn *conn, int64_t stream_id,
 void*user_data,
 void*stream_user_data);
 
+/**
+ * @functypedef
+ *
+ * :type:`ngtcp2_recv_stop_sending` is invoked when a STOP_SENDING frame
+ * is received from a remote endpoint for a stream identified by
+ * |stream_id|. |app_error_code| is the application error code carried
+ * by the STOP_SENDING frame. This callback is called at most
+ * once per stream.
+ *
+ * The callback function must return 0 if it succeeds. Returning
+ * :macro:`NGTCP2_ERR_CALLBACK_FAILURE` makes the library call return
+ * immediately.
+ */
+typedefint (*ngtcp2_recv_stop_sending)(ngtcp2_conn*conn, int64_tstream_id,
+uint64_tapp_error_code,
+void*user_data,
+void*stream_user_data);
+
 /**
  * @functypedef
  *
@@ -3626,7 +3644,8 @@ typedef int (*ngtcp2_get_path_challenge_data2)(ngtcp2_conn *conn,
 #defineNGTCP2_CALLBACKS_V1 1
 #defineNGTCP2_CALLBACKS_V2 2
 #defineNGTCP2_CALLBACKS_V3 3
-#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V3
+#defineNGTCP2_CALLBACKS_V4 4
+#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V4
 
 /**
  * @struct
@@ -3964,6 +3983,16 @@ typedef struct ngtcp2_callbacks {
  * .. version-added:: 1.22.0
  */
 ngtcp2_get_path_challenge_data2get_path_challenge_data2;
+/* The following fields have been added since
+ NGTCP2_CALLBACKS_V3. */
+/**
+ * :member:`recv_stop_sending` is a callback function which is invoked
+ * when a STOP_SENDING frame is received from a remote endpoint. This
+ * callback function is optional.
+ *
+ * .. version-added:: 1.24.0
+ */
+ngtcp2_recv_stop_sendingrecv_stop_sending;
 } ngtcp2_callbacks;
 
 /**

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/version.h

@@ -36,7 +36,7 @@
  *
  * Version number of the ngtcp2 library release.
  */
-#defineNGTCP2_VERSION "1.23.0"
+#defineNGTCP2_VERSION "1.24.0"
 
 /**
  * @macro
@@ -46,6 +46,6 @@
  * number, 8 bits for minor and 8 bits for patch. Version 1.2.3
  * becomes 0x010203.
  */
-#defineNGTCP2_VERSION_NUM0x011700
+#defineNGTCP2_VERSION_NUM0x011800
 
 #endif/* !defined(NGTCP2_VERSION_H) */

deps/ngtcp2/ngtcp2.gyp

@@ -49,7 +49,7 @@
 'ngtcp2/lib/ngtcp2_unreachable.c',
 'ngtcp2/lib/ngtcp2_vec.c',
 'ngtcp2/lib/ngtcp2_version.c',
-'ngtcp2/lib/ngtcp2_window_filter.c',
+'ngtcp2/lib/ngtcp2_wf.c',
 'ngtcp2/crypto/shared.c'
  ],
 'ngtcp2_sources_ossl': [

deps/ngtcp2/ngtcp2/crypto/includes/ngtcp2/ngtcp2_crypto_ossl.h

@@ -145,6 +145,18 @@ NGTCP2_EXTERN SSL *ngtcp2_crypto_ossl_ctx_get_ssl(ngtcp2_crypto_ossl_ctx *ctx);
  */
 NGTCP2_EXTERNintngtcp2_crypto_ossl_init(void);
 
+/**
+ * @function
+ *
+ * `ngtcp2_crypto_ossl_free` frees the resources allocated by
+ * `ngtcp2_crypto_ossl_init`. It is safe to call this function even
+ * if `ngtcp2_crypto_ossl_init` fails or is not called at all. This
+ * function might be useful to make some leak detection tools happy.
+ *
+ * .. version-added:: 1.24.0
+ */
+NGTCP2_EXTERNvoidngtcp2_crypto_ossl_free(void);
+
 /**
  * @function
  *

deps/ngtcp2/ngtcp2/crypto/ossl/ossl.c

@@ -79,6 +79,60 @@ int ngtcp2_crypto_ossl_init(void) {
 return0;
 }
 
+voidngtcp2_crypto_ossl_free(void) {
+if (crypto_hkdf) {
+EVP_KDF_free(crypto_hkdf);
+crypto_hkdf=NULL;
+ }
+
+if (crypto_sha384) {
+EVP_MD_free(crypto_sha384);
+crypto_sha384=NULL;
+ }
+
+if (crypto_sha256) {
+EVP_MD_free(crypto_sha256);
+crypto_sha256=NULL;
+ }
+
+#ifndefNGTCP2_NO_CHACHA_POLY1305
+if (crypto_chacha20) {
+EVP_CIPHER_free(crypto_chacha20);
+crypto_chacha20=NULL;
+ }
+
+if (crypto_chacha20_poly1305) {
+EVP_CIPHER_free(crypto_chacha20_poly1305);
+crypto_chacha20_poly1305=NULL;
+ }
+#endif/* !defined(NGTCP2_NO_CHACHA_POLY1305) */
+
+if (crypto_aes_256_ecb) {
+EVP_CIPHER_free(crypto_aes_256_ecb);
+crypto_aes_256_ecb=NULL;
+ }
+
+if (crypto_aes_128_ecb) {
+EVP_CIPHER_free(crypto_aes_128_ecb);
+crypto_aes_128_ecb=NULL;
+ }
+
+if (crypto_aes_128_ccm) {
+EVP_CIPHER_free(crypto_aes_128_ccm);
+crypto_aes_128_ccm=NULL;
+ }
+
+if (crypto_aes_256_gcm) {
+EVP_CIPHER_free(crypto_aes_256_gcm);
+crypto_aes_256_gcm=NULL;
+ }
+
+if (crypto_aes_128_gcm) {
+EVP_CIPHER_free(crypto_aes_128_gcm);
+crypto_aes_128_gcm=NULL;
+ }
+}
+
 staticconstEVP_CIPHER*crypto_aead_aes_128_gcm(void) {
 if (crypto_aes_128_gcm) {
 returncrypto_aes_128_gcm;

deps/ngtcp2/ngtcp2/examples/http3_server_proto_codec.cc

@@ -603,9 +603,9 @@ std::expected<void, Error> ProtoCodec::start_response(Stream *stream) {
  nghttp3_pri pri;
 
 if (auto rv =
-nghttp3_conn_get_stream_priority(httpconn_, &pri, stream->stream_id);
+nghttp3_conn_get_stream_priority2(httpconn_, &pri, stream->stream_id);
  rv != 0) {
-std::println(stderr, "nghttp3_conn_get_stream_priority: {}",
+std::println(stderr, "nghttp3_conn_get_stream_priority2: {}",
 nghttp3_strerror(rv));
 return std::unexpected{Error::HTTP3};
  }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.cc

@@ -36,23 +36,16 @@
 #include"client_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSClientContext::TLSClientContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSClientContext::~TLSClientContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSClientContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSClientContext {
 public:
-TLSClientContext() = default;
+TLSClientContext();
 ~TLSClientContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.cc

@@ -37,23 +37,16 @@
 #include"server_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSServerContext::TLSServerContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSServerContext::~TLSServerContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSServerContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSServerContext {
 public:
-TLSServerContext() = default;
+TLSServerContext();
 ~TLSServerContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/ngtcp2.h

@@ -3485,6 +3485,24 @@ typedef int (*ngtcp2_stream_stop_sending)(ngtcp2_conn *conn, int64_t stream_id,
 void*user_data,
 void*stream_user_data);
 
+/**
+ * @functypedef
+ *
+ * :type:`ngtcp2_recv_stop_sending` is invoked when a STOP_SENDING frame
+ * is received from a remote endpoint for a stream identified by
+ * |stream_id|. |app_error_code| is the application error code carried
+ * by the STOP_SENDING frame. This callback is called at most
+ * once per stream.
+ *
+ * The callback function must return 0 if it succeeds. Returning
+ * :macro:`NGTCP2_ERR_CALLBACK_FAILURE` makes the library call return
+ * immediately.
+ */
+typedefint (*ngtcp2_recv_stop_sending)(ngtcp2_conn*conn, int64_tstream_id,
+uint64_tapp_error_code,
+void*user_data,
+void*stream_user_data);
+
 /**
  * @functypedef
  *
@@ -3626,7 +3644,8 @@ typedef int (*ngtcp2_get_path_challenge_data2)(ngtcp2_conn *conn,
 #defineNGTCP2_CALLBACKS_V1 1
 #defineNGTCP2_CALLBACKS_V2 2
 #defineNGTCP2_CALLBACKS_V3 3
-#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V3
+#defineNGTCP2_CALLBACKS_V4 4
+#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V4
 
 /**
  * @struct
@@ -3964,6 +3983,16 @@ typedef struct ngtcp2_callbacks {
  * .. version-added:: 1.22.0
  */
 ngtcp2_get_path_challenge_data2get_path_challenge_data2;
+/* The following fields have been added since
+ NGTCP2_CALLBACKS_V3. */
+/**
+ * :member:`recv_stop_sending` is a callback function which is invoked
+ * when a STOP_SENDING frame is received from a remote endpoint. This
+ * callback function is optional.
+ *
+ * .. version-added:: 1.24.0
+ */
+ngtcp2_recv_stop_sendingrecv_stop_sending;
 } ngtcp2_callbacks;
 
 /**

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/version.h

@@ -36,7 +36,7 @@
  *
  * Version number of the ngtcp2 library release.
  */
-#defineNGTCP2_VERSION "1.23.0"
+#defineNGTCP2_VERSION "1.24.0"
 
 /**
  * @macro
@@ -46,6 +46,6 @@
  * number, 8 bits for minor and 8 bits for patch. Version 1.2.3
  * becomes 0x010203.
  */
-#defineNGTCP2_VERSION_NUM0x011700
+#defineNGTCP2_VERSION_NUM0x011800
 
 #endif/* !defined(NGTCP2_VERSION_H) */

deps/ngtcp2/ngtcp2.gyp

@@ -49,7 +49,7 @@
 'ngtcp2/lib/ngtcp2_unreachable.c',
 'ngtcp2/lib/ngtcp2_vec.c',
 'ngtcp2/lib/ngtcp2_version.c',
-'ngtcp2/lib/ngtcp2_window_filter.c',
+'ngtcp2/lib/ngtcp2_wf.c',
 'ngtcp2/crypto/shared.c'
  ],
 'ngtcp2_sources_ossl': [

deps/ngtcp2/ngtcp2/crypto/includes/ngtcp2/ngtcp2_crypto_ossl.h

@@ -145,6 +145,18 @@ NGTCP2_EXTERN SSL *ngtcp2_crypto_ossl_ctx_get_ssl(ngtcp2_crypto_ossl_ctx *ctx);
  */
 NGTCP2_EXTERNintngtcp2_crypto_ossl_init(void);
 
+/**
+ * @function
+ *
+ * `ngtcp2_crypto_ossl_free` frees the resources allocated by
+ * `ngtcp2_crypto_ossl_init`. It is safe to call this function even
+ * if `ngtcp2_crypto_ossl_init` fails or is not called at all. This
+ * function might be useful to make some leak detection tools happy.
+ *
+ * .. version-added:: 1.24.0
+ */
+NGTCP2_EXTERNvoidngtcp2_crypto_ossl_free(void);
+
 /**
  * @function
  *

deps/ngtcp2/ngtcp2/crypto/ossl/ossl.c

@@ -79,6 +79,60 @@ int ngtcp2_crypto_ossl_init(void) {
 return0;
 }
 
+voidngtcp2_crypto_ossl_free(void) {
+if (crypto_hkdf) {
+EVP_KDF_free(crypto_hkdf);
+crypto_hkdf=NULL;
+ }
+
+if (crypto_sha384) {
+EVP_MD_free(crypto_sha384);
+crypto_sha384=NULL;
+ }
+
+if (crypto_sha256) {
+EVP_MD_free(crypto_sha256);
+crypto_sha256=NULL;
+ }
+
+#ifndefNGTCP2_NO_CHACHA_POLY1305
+if (crypto_chacha20) {
+EVP_CIPHER_free(crypto_chacha20);
+crypto_chacha20=NULL;
+ }
+
+if (crypto_chacha20_poly1305) {
+EVP_CIPHER_free(crypto_chacha20_poly1305);
+crypto_chacha20_poly1305=NULL;
+ }
+#endif/* !defined(NGTCP2_NO_CHACHA_POLY1305) */
+
+if (crypto_aes_256_ecb) {
+EVP_CIPHER_free(crypto_aes_256_ecb);
+crypto_aes_256_ecb=NULL;
+ }
+
+if (crypto_aes_128_ecb) {
+EVP_CIPHER_free(crypto_aes_128_ecb);
+crypto_aes_128_ecb=NULL;
+ }
+
+if (crypto_aes_128_ccm) {
+EVP_CIPHER_free(crypto_aes_128_ccm);
+crypto_aes_128_ccm=NULL;
+ }
+
+if (crypto_aes_256_gcm) {
+EVP_CIPHER_free(crypto_aes_256_gcm);
+crypto_aes_256_gcm=NULL;
+ }
+
+if (crypto_aes_128_gcm) {
+EVP_CIPHER_free(crypto_aes_128_gcm);
+crypto_aes_128_gcm=NULL;
+ }
+}
+
 staticconstEVP_CIPHER*crypto_aead_aes_128_gcm(void) {
 if (crypto_aes_128_gcm) {
 returncrypto_aes_128_gcm;

deps/ngtcp2/ngtcp2/examples/http3_server_proto_codec.cc

@@ -603,9 +603,9 @@ std::expected<void, Error> ProtoCodec::start_response(Stream *stream) {
  nghttp3_pri pri;
 
 if (auto rv =
-nghttp3_conn_get_stream_priority(httpconn_, &pri, stream->stream_id);
+nghttp3_conn_get_stream_priority2(httpconn_, &pri, stream->stream_id);
  rv != 0) {
-std::println(stderr, "nghttp3_conn_get_stream_priority: {}",
+std::println(stderr, "nghttp3_conn_get_stream_priority2: {}",
 nghttp3_strerror(rv));
 return std::unexpected{Error::HTTP3};
  }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.cc

@@ -36,23 +36,16 @@
 #include"client_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSClientContext::TLSClientContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSClientContext::~TLSClientContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSClientContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSClientContext {
 public:
-TLSClientContext() = default;
+TLSClientContext();
 ~TLSClientContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.cc

@@ -37,23 +37,16 @@
 #include"server_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSServerContext::TLSServerContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSServerContext::~TLSServerContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSServerContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSServerContext {
 public:
-TLSServerContext() = default;
+TLSServerContext();
 ~TLSServerContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/ngtcp2.h

@@ -3485,6 +3485,24 @@ typedef int (*ngtcp2_stream_stop_sending)(ngtcp2_conn *conn, int64_t stream_id,
 void*user_data,
 void*stream_user_data);
 
+/**
+ * @functypedef
+ *
+ * :type:`ngtcp2_recv_stop_sending` is invoked when a STOP_SENDING frame
+ * is received from a remote endpoint for a stream identified by
+ * |stream_id|. |app_error_code| is the application error code carried
+ * by the STOP_SENDING frame. This callback is called at most
+ * once per stream.
+ *
+ * The callback function must return 0 if it succeeds. Returning
+ * :macro:`NGTCP2_ERR_CALLBACK_FAILURE` makes the library call return
+ * immediately.
+ */
+typedefint (*ngtcp2_recv_stop_sending)(ngtcp2_conn*conn, int64_tstream_id,
+uint64_tapp_error_code,
+void*user_data,
+void*stream_user_data);
+
 /**
  * @functypedef
  *
@@ -3626,7 +3644,8 @@ typedef int (*ngtcp2_get_path_challenge_data2)(ngtcp2_conn *conn,
 #defineNGTCP2_CALLBACKS_V1 1
 #defineNGTCP2_CALLBACKS_V2 2
 #defineNGTCP2_CALLBACKS_V3 3
-#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V3
+#defineNGTCP2_CALLBACKS_V4 4
+#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V4
 
 /**
  * @struct
@@ -3964,6 +3983,16 @@ typedef struct ngtcp2_callbacks {
  * .. version-added:: 1.22.0
  */
 ngtcp2_get_path_challenge_data2get_path_challenge_data2;
+/* The following fields have been added since
+ NGTCP2_CALLBACKS_V3. */
+/**
+ * :member:`recv_stop_sending` is a callback function which is invoked
+ * when a STOP_SENDING frame is received from a remote endpoint. This
+ * callback function is optional.
+ *
+ * .. version-added:: 1.24.0
+ */
+ngtcp2_recv_stop_sendingrecv_stop_sending;
 } ngtcp2_callbacks;
 
 /**

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/version.h

@@ -36,7 +36,7 @@
  *
  * Version number of the ngtcp2 library release.
  */
-#defineNGTCP2_VERSION "1.23.0"
+#defineNGTCP2_VERSION "1.24.0"
 
 /**
  * @macro
@@ -46,6 +46,6 @@
  * number, 8 bits for minor and 8 bits for patch. Version 1.2.3
  * becomes 0x010203.
  */
-#defineNGTCP2_VERSION_NUM0x011700
+#defineNGTCP2_VERSION_NUM0x011800
 
 #endif/* !defined(NGTCP2_VERSION_H) */

deps/ngtcp2/ngtcp2.gyp

@@ -49,7 +49,7 @@
 'ngtcp2/lib/ngtcp2_unreachable.c',
 'ngtcp2/lib/ngtcp2_vec.c',
 'ngtcp2/lib/ngtcp2_version.c',
-'ngtcp2/lib/ngtcp2_window_filter.c',
+'ngtcp2/lib/ngtcp2_wf.c',
 'ngtcp2/crypto/shared.c'
  ],
 'ngtcp2_sources_ossl': [

deps/ngtcp2/ngtcp2/crypto/includes/ngtcp2/ngtcp2_crypto_ossl.h

@@ -145,6 +145,18 @@ NGTCP2_EXTERN SSL *ngtcp2_crypto_ossl_ctx_get_ssl(ngtcp2_crypto_ossl_ctx *ctx);
  */
 NGTCP2_EXTERNintngtcp2_crypto_ossl_init(void);
 
+/**
+ * @function
+ *
+ * `ngtcp2_crypto_ossl_free` frees the resources allocated by
+ * `ngtcp2_crypto_ossl_init`. It is safe to call this function even
+ * if `ngtcp2_crypto_ossl_init` fails or is not called at all. This
+ * function might be useful to make some leak detection tools happy.
+ *
+ * .. version-added:: 1.24.0
+ */
+NGTCP2_EXTERNvoidngtcp2_crypto_ossl_free(void);
+
 /**
  * @function
  *

deps/ngtcp2/ngtcp2/crypto/ossl/ossl.c

@@ -79,6 +79,60 @@ int ngtcp2_crypto_ossl_init(void) {
 return0;
 }
 
+voidngtcp2_crypto_ossl_free(void) {
+if (crypto_hkdf) {
+EVP_KDF_free(crypto_hkdf);
+crypto_hkdf=NULL;
+ }
+
+if (crypto_sha384) {
+EVP_MD_free(crypto_sha384);
+crypto_sha384=NULL;
+ }
+
+if (crypto_sha256) {
+EVP_MD_free(crypto_sha256);
+crypto_sha256=NULL;
+ }
+
+#ifndefNGTCP2_NO_CHACHA_POLY1305
+if (crypto_chacha20) {
+EVP_CIPHER_free(crypto_chacha20);
+crypto_chacha20=NULL;
+ }
+
+if (crypto_chacha20_poly1305) {
+EVP_CIPHER_free(crypto_chacha20_poly1305);
+crypto_chacha20_poly1305=NULL;
+ }
+#endif/* !defined(NGTCP2_NO_CHACHA_POLY1305) */
+
+if (crypto_aes_256_ecb) {
+EVP_CIPHER_free(crypto_aes_256_ecb);
+crypto_aes_256_ecb=NULL;
+ }
+
+if (crypto_aes_128_ecb) {
+EVP_CIPHER_free(crypto_aes_128_ecb);
+crypto_aes_128_ecb=NULL;
+ }
+
+if (crypto_aes_128_ccm) {
+EVP_CIPHER_free(crypto_aes_128_ccm);
+crypto_aes_128_ccm=NULL;
+ }
+
+if (crypto_aes_256_gcm) {
+EVP_CIPHER_free(crypto_aes_256_gcm);
+crypto_aes_256_gcm=NULL;
+ }
+
+if (crypto_aes_128_gcm) {
+EVP_CIPHER_free(crypto_aes_128_gcm);
+crypto_aes_128_gcm=NULL;
+ }
+}
+
 staticconstEVP_CIPHER*crypto_aead_aes_128_gcm(void) {
 if (crypto_aes_128_gcm) {
 returncrypto_aes_128_gcm;

deps/ngtcp2/ngtcp2/examples/http3_server_proto_codec.cc

@@ -603,9 +603,9 @@ std::expected<void, Error> ProtoCodec::start_response(Stream *stream) {
  nghttp3_pri pri;
 
 if (auto rv =
-nghttp3_conn_get_stream_priority(httpconn_, &pri, stream->stream_id);
+nghttp3_conn_get_stream_priority2(httpconn_, &pri, stream->stream_id);
  rv != 0) {
-std::println(stderr, "nghttp3_conn_get_stream_priority: {}",
+std::println(stderr, "nghttp3_conn_get_stream_priority2: {}",
 nghttp3_strerror(rv));
 return std::unexpected{Error::HTTP3};
  }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.cc

@@ -36,23 +36,16 @@
 #include"client_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSClientContext::TLSClientContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSClientContext::~TLSClientContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSClientContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_client_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSClientContext {
 public:
-TLSClientContext() = default;
+TLSClientContext();
 ~TLSClientContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.cc

@@ -37,23 +37,16 @@
 #include"server_base.h"
 #include"template.h"
 
-namespace {
-auto _ = [] {
-if (ngtcp2_crypto_ossl_init() != 0) {
-assert(0);
-abort();
- }
-
-return0;
-}();
-} // namespace
-
 extern Config config;
 
+TLSServerContext::TLSServerContext() { ngtcp2_crypto_ossl_init(); }
+
 TLSServerContext::~TLSServerContext() {
 if (ssl_ctx_) {
 SSL_CTX_free(ssl_ctx_);
  }
+
+ngtcp2_crypto_ossl_free();
 }
 
 SSL_CTX *TLSServerContext::get_native_handle() const { return ssl_ctx_; }

deps/ngtcp2/ngtcp2/examples/tls_server_context_ossl.h

@@ -37,7 +37,7 @@ using namespace ngtcp2;
 
 classTLSServerContext {
 public:
-TLSServerContext() = default;
+TLSServerContext();
 ~TLSServerContext();
 
  std::expected<void, Error> init(constchar *private_key_file,

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/ngtcp2.h

@@ -3485,6 +3485,24 @@ typedef int (*ngtcp2_stream_stop_sending)(ngtcp2_conn *conn, int64_t stream_id,
 void*user_data,
 void*stream_user_data);
 
+/**
+ * @functypedef
+ *
+ * :type:`ngtcp2_recv_stop_sending` is invoked when a STOP_SENDING frame
+ * is received from a remote endpoint for a stream identified by
+ * |stream_id|. |app_error_code| is the application error code carried
+ * by the STOP_SENDING frame. This callback is called at most
+ * once per stream.
+ *
+ * The callback function must return 0 if it succeeds. Returning
+ * :macro:`NGTCP2_ERR_CALLBACK_FAILURE` makes the library call return
+ * immediately.
+ */
+typedefint (*ngtcp2_recv_stop_sending)(ngtcp2_conn*conn, int64_tstream_id,
+uint64_tapp_error_code,
+void*user_data,
+void*stream_user_data);
+
 /**
  * @functypedef
  *
@@ -3626,7 +3644,8 @@ typedef int (*ngtcp2_get_path_challenge_data2)(ngtcp2_conn *conn,
 #defineNGTCP2_CALLBACKS_V1 1
 #defineNGTCP2_CALLBACKS_V2 2
 #defineNGTCP2_CALLBACKS_V3 3
-#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V3
+#defineNGTCP2_CALLBACKS_V4 4
+#defineNGTCP2_CALLBACKS_VERSION NGTCP2_CALLBACKS_V4
 
 /**
  * @struct
@@ -3964,6 +3983,16 @@ typedef struct ngtcp2_callbacks {
  * .. version-added:: 1.22.0
  */
 ngtcp2_get_path_challenge_data2get_path_challenge_data2;
+/* The following fields have been added since
+ NGTCP2_CALLBACKS_V3. */
+/**
+ * :member:`recv_stop_sending` is a callback function which is invoked
+ * when a STOP_SENDING frame is received from a remote endpoint. This
+ * callback function is optional.
+ *
+ * .. version-added:: 1.24.0
+ */
+ngtcp2_recv_stop_sendingrecv_stop_sending;
 } ngtcp2_callbacks;
 
 /**

deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/version.h

@@ -36,7 +36,7 @@
  *
  * Version number of the ngtcp2 library release.
  */
-#defineNGTCP2_VERSION "1.23.0"
+#defineNGTCP2_VERSION "1.24.0"
 
 /**
  * @macro
@@ -46,6 +46,6 @@
  * number, 8 bits for minor and 8 bits for patch. Version 1.2.3
  * becomes 0x010203.
  */
-#defineNGTCP2_VERSION_NUM0x011700
+#defineNGTCP2_VERSION_NUM0x011800
 
 #endif/* !defined(NGTCP2_VERSION_H) */