]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 79a03b3) | patch
HTTP/2: reject self-dependent streams.
authorPiotr Sikora <piotrsikora@google.com>
Fri, 2 Oct 2015 03:25:55 +0000 (20:25 -0700)
committerPiotr Sikora <piotrsikora@google.com>
Fri, 2 Oct 2015 03:25:55 +0000 (20:25 -0700)
commit71a6b600c25639cc7452a817806d3bf40149bf95
tree2de33e43d27ec8647cc3ac00d5c837529cfb4c7ftree | snapshot
parent79a03b3ff6d950e60a06c6d979bd7a909709e82dcommit | diff
HTTP/2: reject self-dependent streams.

Per RFC7540, a stream cannot depend on itself.

Previously, this requirement was enforced on PRIORITY frames, but not on
HEADERS frames and due to the implementation details nginx worker would
crash (stack overflow) while opening self-dependent stream.

Found with afl-fuzz.

Signed-off-by: Piotr Sikora <piotrsikora@google.com>
src/http/v2/ngx_http_v2.c diff | blob | history
nginx upstream