arturobernalg opened a new pull request, #1124: URL: https://github.com/apache/tomcat/pull/1124
RFC 9113, section 6.2 requires that a HEADERS frame without the END_HEADERS flag set MUST be followed by a CONTINUATION frame for the same stream. The receipt of any other frame type MUST be treated as a connection error of type PROTOCOL_ERROR. Http2Parser.validateFrame() contained an explicit no-op branch for RST_STREAM frames received while a header block was in progress. This silently ignored the RST_STREAM instead of triggering the required connection error. The fix removes the no-op branch so that RST_STREAM, like any other non-CONTINUATION frame, causes a PROTOCOL_ERROR connection error. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
