]> git.kaiwu.me - nginx.git/commit
HTTP/3: handled insertion reference to a going to be evicted entry.
authorRoman Arutyunyan <arut@nginx.com>
Tue, 3 Jan 2023 12:24:45 +0000 (16:24 +0400)
committerRoman Arutyunyan <arut@nginx.com>
Tue, 3 Jan 2023 12:24:45 +0000 (16:24 +0400)
commitd04f45ac5bddb034ec8c5b0874a7358a991d1b77
tree54f91b662850337657f5109bc70b273f8e04cf25
parentf5aa66bd309a4cbec67285770c77db5d33347c27
HTTP/3: handled insertion reference to a going to be evicted entry.

As per RFC 9204, section 3.2.2, a new entry can reference an entry in the
dynamic table that will be evicted when adding this new entry into the dynamic
table.

Previously, such inserts resulted in use-after-free since the old entry was
evicted before the insertion (ticket #2431).  Now it's evicted after the
insertion.

This change fixes Insert with Name Reference and Duplicate encoder instructions.
src/http/v3/ngx_http_v3_table.c