arturobernalg opened a new pull request, #1138: URL: https://github.com/apache/tomcat/pull/1138
Backport of https://github.com/apache/tomcat/pull/1137 to the 11.0.x branch. RFC 9113 §6.10 states that any frame other than CONTINUATION received while a header block is in progress MUST be treated as a connection error of type PROTOCOL_ERROR. RST_STREAM is not exempt. Two defects fixed in Http2Parser.validateFrame(): 1. Wrong error code: COMPRESSION_ERROR used instead of PROTOCOL_ERROR for mid-header-block violations. 2. RST_STREAM carve-out: a NO-OP branch silently accepted RST_STREAM during an in-progress header block instead of closing the connection. Cherry-picked cleanly from main with no conflicts. All TestHttp2Section_* tests pass. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
