Commit Graph

8189 Commits

Author SHA1 Message Date
Tatsuhiro Tsujikawa
e01c9f10a3 Merge pull request #2304 from nghttp2/cmake-src-tests
cmake: Disable src tests if BUILD_TESTING is OFF
2025-02-03 19:07:39 +09:00
Tatsuhiro Tsujikawa
a2db898d70 cmake: Disable src tests if BUILD_TESTING is OFF 2025-02-03 18:17:34 +09:00
Tatsuhiro Tsujikawa
fd4505cfb2 Merge pull request #2302 from nghttp2/min-quic-pktlen
The minimum length of a valid QUIC packet is 21
2025-01-29 22:53:19 +09:00
Tatsuhiro Tsujikawa
9c23c72d99 The minimum length of a valid QUIC packet is 21 2025-01-29 22:33:23 +09:00
Tatsuhiro Tsujikawa
d037dc32b4 Merge pull request #2301 from nghttp2/dependabot/go_modules/github.com/quic-go/quic-go-0.49.0
build(deps): bump github.com/quic-go/quic-go from 0.48.2 to 0.49.0
2025-01-28 00:01:21 +09:00
dependabot[bot]
e045b46352 build(deps): bump github.com/quic-go/quic-go from 0.48.2 to 0.49.0
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.48.2 to 0.49.0.
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Changelog](https://github.com/quic-go/quic-go/blob/master/Changelog.md)
- [Commits](https://github.com/quic-go/quic-go/compare/v0.48.2...v0.49.0)

---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-27 14:12:46 +00:00
Tatsuhiro Tsujikawa
a4dad6d36a Merge pull request #2300 from nghttp2/stale-exempt-pr
GHA: Exempt pull request from actions/stale
2025-01-27 18:33:59 +09:00
Tatsuhiro Tsujikawa
bdf7f14b3d GHA: Exempt pull request from actions/stale 2025-01-27 18:13:27 +09:00
Tatsuhiro Tsujikawa
0c9fdf2639 Merge pull request #2299 from nghttp2/nullptr
src: nullptr
2025-01-26 21:51:37 +09:00
Tatsuhiro Tsujikawa
dd59dd8ba9 src: nullptr 2025-01-26 21:29:58 +09:00
Tatsuhiro Tsujikawa
280110ca8d Merge pull request #2298 from nghttp2/fix-stale-action
Workaround actions/stale cache issue
2025-01-26 17:45:08 +09:00
Tatsuhiro Tsujikawa
f9958255ee Workaround actions/stale cache issue 2025-01-26 17:26:17 +09:00
Tatsuhiro Tsujikawa
e25e68f234 Merge pull request #2297 from thevilledev/fix/hd-int-overflow-check
fix: Add defensive bounds checking in hd_ringbuf_init()
2025-01-25 15:40:50 +09:00
Ville Vesilehto
01accaef55 fix: remove redundant sizeof check
Co-authored-by: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
2025-01-24 13:24:40 +02:00
Ville Vesilehto
d06472b2c1 fix: optimise for conditions
Co-authored-by: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
2025-01-24 13:20:09 +02:00
Ville Vesilehto
8ada192e69 fix: set max_size as const
Co-authored-by: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
2025-01-24 13:16:37 +02:00
Ville Vesilehto
639b14710b fix: Add defensive integer overflow checks in hd ringbuf init
Add bounds checking in hd_ringbuf_init() to prevent potential integer
overflow during size calculations. While HPACK decoder controls its own
buffer size (4-8K typical) and is not vulnerable to remote exploitation,
this adds defensive programming guards for robustness.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
2025-01-20 20:57:20 +02:00
Tatsuhiro Tsujikawa
ab19019b77 Merge pull request #2296 from nghttp2/xmlfree
HtmlParser: Use xmlFree
2025-01-18 18:35:56 +09:00
Tatsuhiro Tsujikawa
15d754040a HtmlParser: Use xmlFree 2025-01-18 17:35:45 +09:00
Tatsuhiro Tsujikawa
f88c09857d Merge pull request #2295 from nghttp2/dependabot/go_modules/golang.org/x/net-0.34.0
build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0
2025-01-14 18:16:54 +09:00
dependabot[bot]
3cb06f116d build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.33.0 to 0.34.0.
- [Commits](https://github.com/golang/net/compare/v0.33.0...v0.34.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-13 14:56:50 +00:00
Tatsuhiro Tsujikawa
e53096123c Merge pull request #2294 from nghttp2/remove-nghttp2-dependency-based-priority-section
Remove nghttp2 dependency based priority section
2025-01-12 18:24:40 +09:00
Tatsuhiro Tsujikawa
48cdba3553 Update manual pages 2025-01-12 17:51:21 +09:00
Tatsuhiro Tsujikawa
7149876704 nghttp: Remove DEPENDENCY BASED PRIORITY section from its manual page 2025-01-12 17:49:10 +09:00
Tatsuhiro Tsujikawa
6494f05638 Merge pull request #2293 from nghttp2/update-priority-doc
Update Stream priorities section
2025-01-12 17:48:05 +09:00
Tatsuhiro Tsujikawa
1f5818070d Merge pull request #2292 from nghttp2/nghttp-show-deprecation-warn-no-rfc7540-pri
nghttp: Show deprecation warning for --no-rfc7540-pri option
2025-01-12 17:13:19 +09:00
Tatsuhiro Tsujikawa
db12ee7a37 Update Stream priorities section 2025-01-12 17:10:22 +09:00
Tatsuhiro Tsujikawa
82602821d0 nghttp: Show deprecation warning for --no-rfc7540-pri option 2025-01-12 16:47:03 +09:00
Tatsuhiro Tsujikawa
d928ceb75a Merge pull request #2291 from nghttp2/nghttpd-remove-rfc7540-pri
nghttpd: Remove RFC 7540 priorities
2025-01-12 16:46:25 +09:00
Tatsuhiro Tsujikawa
7f871f63ea nghttpd: Remove RFC 7540 priorities
This change deprecates --no-rfc7540-pri option.
SETTINGS_NO_RFC7540_PRIORITIES is now always sent.
2025-01-12 16:23:45 +09:00
Tatsuhiro Tsujikawa
7e096cbc41 Merge pull request #2290 from nghttp2/nghttp-remove-rfc7540-pri
nghttp: Remove RFC 7540 priorities
2025-01-11 19:02:00 +09:00
Tatsuhiro Tsujikawa
f25a8dca17 nghttp: Remove RFC 7540 priorities
This change removes RFC 7540 priorities from nghttp.  nghttp now does
not create the initial dependency tree.  --no-dep and --no-rfc7540-pri
options have been removed.

nghttp now always sends NGHTTP2_SETTINGS_NO_RFC7540_PRIORITIES.
--extpri option has been added to set priority for a given URI.
2025-01-11 16:54:39 +09:00
Tatsuhiro Tsujikawa
c8bcf5a6a2 Merge pull request #2289 from nghttp2/deprecate-nghttp2_option_set_no_closed_streams
Deprecate nghttp2_option_set_no_closed_streams
2025-01-11 16:53:54 +09:00
Tatsuhiro Tsujikawa
b2a3299e8e Deprecate nghttp2_option_set_no_closed_streams 2025-01-11 16:13:19 +09:00
Tatsuhiro Tsujikawa
26a33cf99b Merge pull request #2288 from nghttp2/deprecate-nghttp2_option_set_server_fallback_rfc7540_priorities
Deprecate nghttp2_option_set_server_fallback_rfc7540_priorities
2025-01-10 19:40:44 +09:00
Tatsuhiro Tsujikawa
cb8421e353 Merge pull request #2287 from nghttp2/remove-rfc7540-priority
Remove RFC 7540 priorities
2025-01-10 19:01:58 +09:00
Tatsuhiro Tsujikawa
96e06509ac Deprecate nghttp2_option_set_server_fallback_rfc7540_priorities 2025-01-10 18:45:23 +09:00
Tatsuhiro Tsujikawa
3dd61f8ec3 Remove RFC 7540 priorities
Summary of the behavioral changes in public API functions:

- nghttp2_session_change_stream_priority: This function is noop.  It
  always returns 0.
- nghttp2_session_create_idle_stream: This function is noop.  It
  always returns 0.
- nghttp2_submit_request: pri_spec is ignored.
- nghttp2_submit_request2: pri_spec is ignored.
- nghttp2_submit_headers: pri_spec is ignored.
- nghttp2_submit_priority: This function is noop.  It always returns
  0.
- nghttp2_stream_get_parent: This function always returns NULL.
- nghttp2_stream_get_next_sibling: This function always returns NULL.
- nghttp2_stream_get_previous_sibling: This function always returns
  NULL.
- nghttp2_stream_get_first_child: This function always returns NULL.
- nghttp2_stream_get_weight: This function always returns
  NGHTTP2_DEFAULT_WEIGHT.
- nghttp2_stream_get_sum_dependency_weight: This function always
  returns 0.
2025-01-10 18:29:38 +09:00
Tatsuhiro Tsujikawa
8c83772f6c Merge pull request #2286 from nghttp2/bump-munit
Bump munit
2025-01-03 13:56:02 +09:00
Tatsuhiro Tsujikawa
a8d731d81f Bump munit 2025-01-03 13:07:12 +09:00
Tatsuhiro Tsujikawa
5ca0bca199 Merge pull request #2283 from nghttp2/bump-ngtcp2
Bump ngtcp2 and QUIC dependencies
2024-12-19 22:26:05 +09:00
Tatsuhiro Tsujikawa
89f27a597f Merge pull request #2282 from nghttp2/bump-golang.org/x/net
Bump golang.org/x/net to v0.33.0
2024-12-19 21:57:15 +09:00
Tatsuhiro Tsujikawa
947928bcc2 Bump golang.org/x/net to v0.33.0 2024-12-19 21:18:59 +09:00
Tatsuhiro Tsujikawa
23a17d0048 Bump ngtcp2 and QUIC dependencies 2024-12-19 21:08:07 +09:00
Tatsuhiro Tsujikawa
59f85c5d62 Merge pull request #2281 from nghttp2/dependabot/go_modules/golang.org/x/net-0.32.0
build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0
2024-12-10 02:28:21 +09:00
dependabot[bot]
c7bf69c8e1 build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.31.0 to 0.32.0.
- [Commits](https://github.com/golang/net/compare/v0.31.0...v0.32.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-09 15:35:58 +00:00
Tatsuhiro Tsujikawa
92fa43ac91 Merge pull request #2279 from nghttp2/dependabot/go_modules/github.com/quic-go/quic-go-0.48.2
build(deps): bump github.com/quic-go/quic-go from 0.48.1 to 0.48.2
2024-12-10 00:34:58 +09:00
dependabot[bot]
b05ee704dd build(deps): bump github.com/quic-go/quic-go from 0.48.1 to 0.48.2
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.48.1 to 0.48.2.
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Changelog](https://github.com/quic-go/quic-go/blob/master/Changelog.md)
- [Commits](https://github.com/quic-go/quic-go/compare/v0.48.1...v0.48.2)

---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-02 16:31:03 +00:00
Tatsuhiro Tsujikawa
68c3600d9f Merge pull request #2275 from nghttp2/bump-ngtcp2
Bump ngtcp2
2024-11-25 20:18:54 +09:00
Tatsuhiro Tsujikawa
f51e9b300f GHA: Fix build error on Mac OS 14 2024-11-25 19:17:21 +09:00