nghttp2/nghttp2
1
0
Fork 0
mirror of https://github.com/nghttp2/nghttp2.git synced 2025-12-08 02:58:53 +08:00
Code Issues Projects Releases Wiki Activity

nghttpx: Reset stream if request header field name is malformed

Browse Source
This commit is contained in:
Tatsuhiro Tsujikawa
2015-01-24 00:37:26 +09:00
parent 8d5c893929
commit 6b4b7bef23
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/shrpx_http2_upstream.cc
View File

@@ -179,6 +179,15 @@ int on_header_callback(nghttp2_session *session, const nghttp2_frame *frame,
return 0;
}
if (!nghttp2_check_header_name(name, namelen)) {
// we are not forgiving for malformed header field name in
// request.
upstream->rst_stream(downstream, NGHTTP2_PROTOCOL_ERROR);
return NGHTTP2_ERR_TEMPORAL_CALLBACK_FAILURE;
}
if (!nghttp2_check_header_value(value, valuelen)) {
return 0;
}
if (!http2::check_nv(name, namelen, value, valuelen)) {
// Simply discard name/value, as if it never happen.
return 0;