diff options
| author | Piotr Sikora <piotrsikora@google.com> | 2015-10-01 20:25:55 -0700 |
|---|---|---|
| committer | Piotr Sikora <piotrsikora@google.com> | 2015-10-01 20:25:55 -0700 |
| commit | 71a6b600c25639cc7452a817806d3bf40149bf95 (patch) | |
| tree | 2de33e43d27ec8647cc3ac00d5c837529cfb4c7f /src/core/ngx_parse_time.c | |
| parent | 79a03b3ff6d950e60a06c6d979bd7a909709e82d (diff) | |
| download | nginx-71a6b600c25639cc7452a817806d3bf40149bf95.tar.gz nginx-71a6b600c25639cc7452a817806d3bf40149bf95.tar.bz2 | |
HTTP/2: reject self-dependent streams.
Per RFC7540, a stream cannot depend on itself.
Previously, this requirement was enforced on PRIORITY frames, but not on
HEADERS frames and due to the implementation details nginx worker would
crash (stack overflow) while opening self-dependent stream.
Found with afl-fuzz.
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
Diffstat (limited to 'src/core/ngx_parse_time.c')
0 files changed, 0 insertions, 0 deletions