Disable CREDENTIALS frames when using spdy/2.1 or earlier.

net/spdy/spdy_session.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/spdy/spdy_session.h"
 
 #include "base/basictypes.h"
 #include "base/logging.h"
 #include "base/memory/linked_ptr.h"
 #include "base/message_loop.h"
@@ skipping 535 matching lines @@
 
   DCHECK_EQ(active_streams_[stream_id].get(), stream.get());
   return OK;
 }
 
 bool SpdySession::NeedsCredentials(const HostPortPair& origin) const {
   if (!is_secure_)
     return false;
   SSLClientSocket* ssl_socket =
       reinterpret_cast<SSLClientSocket*>(connection_->socket());
+  if (ssl_socket->protocol_negotiated() <= SSLClientSocket::kProtoSPDY21)

[wtc, 2012/02/14 00:57:36]

Nit: it's safer to test < SSLClientSocket:: kProtoSPDY3 here.

[Ryan Hamilton, 2012/02/14 00:58:55]

Done.

+    return false;
   if (!ssl_socket->WasOriginBoundCertSent())
     return false;
   return !credential_state_.HasCredential(origin);
 }
 
 int SpdySession::WriteSynStream(
     spdy::SpdyStreamId stream_id,
     RequestPriority priority,
     spdy::SpdyControlFlags flags,
     const linked_ptr<spdy::SpdyHeaderBlock>& headers) {
@@ skipping 1350 matching lines @@
   if (it == pending_callback_map_.end())
     return;
 
   CompletionCallback callback = it->second.callback;
   int result = it->second.result;
   pending_callback_map_.erase(it);
   callback.Run(result);
 }
 
 }  // namespace net