From 9d1f7d142f26b0bb06b440bef4ed7f6838be6afd Mon Sep 17 00:00:00 2001
From: Sergey Kandaurov <pluknet@nginx.com>
Date: Wed, 22 Sep 2021 14:10:43 +0300
Subject: [PATCH] HTTP/3: fixed null pointer dereference with server push.

See details for HTTP/2 fix in 8b0553239592 for a complete description.
---
 src/http/v3/ngx_http_v3_filter_module.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/http/v3/ngx_http_v3_filter_module.c b/src/http/v3/ngx_http_v3_filter_module.c
index 43d2cd1bd..a88b32f07 100644
--- a/src/http/v3/ngx_http_v3_filter_module.c
+++ b/src/http/v3/ngx_http_v3_filter_module.c
@@ -858,6 +858,10 @@ ngx_http_v3_push_resource(ngx_http_request_t *r, ngx_str_t *path,
         return NGX_ABORT;
     }
 
+    if (r->headers_in.host == NULL) {
+        return NGX_ABORT;
+    }
+
     push_id = h3c->next_push_id++;
 
     rc = ngx_http_v3_create_push_request(r, path, push_id);