Skip to content

Check HPACK Huffman code strictly#2200

Merged
zwoop merged 2 commits intoapache:7.1.xfrom
maskit:backport-2172
Jun 27, 2017
Merged

Check HPACK Huffman code strictly#2200
zwoop merged 2 commits intoapache:7.1.xfrom
maskit:backport-2172

Conversation

@maskit
Copy link
Copy Markdown
Member

@maskit maskit commented Jun 26, 2017

Cherry-picks for 7.1

maskit added 2 commits June 27, 2017 08:46
HPACK Huffman decoder was trying to decode whole Huffman code block that includes extra padding.
This is prohibited by the spec (Sec 5.2), and it must be treated as a decoding error.

(cherry picked from commit ea9efb1)
HPACK Huffman code didn't care whether all padding bits are one.
This is prohibited by the spec(Sec 5.2), and it must be treated as a decode error.

(cherry picked from commit b228c13)
@maskit maskit added the Backport Marked for backport for an LTS patch release label Jun 26, 2017
@maskit maskit added this to the 7.1.0 milestone Jun 26, 2017
@maskit maskit self-assigned this Jun 26, 2017
@maskit maskit requested a review from masaori335 June 26, 2017 23:50
@zwoop zwoop merged commit 3b5617d into apache:7.1.x Jun 27, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Backport Marked for backport for an LTS patch release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants