Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Blocker
Fix Version/s: 8.0.0.GA-CR1, 8.0.0.GA
Affects Version/s: 8.0.0.GA
Component/s: Undertow
Labels:
- core

Blocked:
False
Blocked Reason:
None
Ready:
False
CDW devel_ack:
CDW docs_ack:
CDW pm_ack:
CDW qa_ack:
CDW release:
Target Release:

8.0.0.GA
Git Pull Request:
https://gitlab.cee.redhat.com/undertow-io/undertow/-/commit/cdd5355519d06789ed44b3e94a89f795c2a952af
Steps to Reproduce:
Hide

Download latest version of the h2spec TS - https://github.com/summerwind/h2spec/releases/tag/v2.6.0

extract it

start the JBoss EAP/WildFly server with default configuration ./bin/standalone.sh

start the TS: ./h2spec -h localhost -t -k -p 8443 http2/8
Show
Download latest version of the h2spec TS - https://github.com/summerwind/h2spec/releases/tag/v2.6.0 extract it start the JBoss EAP/WildFly server with default configuration ./bin/standalone.sh start the TS: ./h2spec -h localhost -t -k -p 8443 http2/8
Intelligence Requested:
Market:

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

With recent nightly builds of JBoss EAP (and WildFly too) we can see failures of 2 negative tests in the h2spec TS we use to check that JBoss EAP/WildFly/Undertow behaves according to the HTTP2 protocol standard.

Here are the failing tests:

Hypertext Transfer Protocol Version 2 (HTTP/2)
  8. HTTP Message Exchanges
    8.1. HTTP Request/Response Exchange
      × 1: Sends a second HEADERS frame without the END_STREAM flag
        -> The endpoint MUST respond with a stream error of type PROTOCOL_ERROR.
           Expected: GOAWAY Frame (Error Code: PROTOCOL_ERROR)
                     RST_STREAM Frame (Error Code: PROTOCOL_ERROR)
                     Connection closed
             Actual: DATA Frame (length:1504, flags:0x01, stream_id:1)

      8.1.2. HTTP Header Fields
        8.1.2.1. Pseudo-Header Fields
          × 3: Sends a HEADERS frame that contains a pseudo-header field as trailers
            -> The endpoint MUST respond with a stream error of type PROTOCOL_ERROR.
               Expected: GOAWAY Frame (Error Code: PROTOCOL_ERROR)
                         RST_STREAM Frame (Error Code: PROTOCOL_ERROR)
                         Connection closed
                 Actual: DATA Frame (length:1504, flags:0x01, stream_id:1)

What these two tests do is they simulate misbehaving client that breaks the HTTP2 protocol and server is supposed to end the connection with the client with PROTOCOL_ERROR code. But in our case the server happily continues with the DATA frame instead.

After some checks I found out that it was brought in by changes that were implemented for the ~~UNDERTOW-2258~~ issue - this PR and specifically this particular commit is the culprit that these two tests started to fail.

My assumption is that part of the code that sends the PROTOCOL_ERROR shouldn't have been removed completely but should have been kept there under some extra condition?

is caused by

UNDERTOW-2258 Http2ClientConnection does not handle continue responses properly

Closed

is cloned by

JBEAP-25053 [QE](7.4.z) UNDERTOW-2281 - Undertow HTTP2 breaks protocol specification when client misbehaves

Closed

UNDERTOW-2281 Undertow HTTP2 breaks protocol specification when client misbehaves

Closed

is incorporated by

JBEAP-25097 Upgrade Undertow from 2.3.7.Final to 2.3.7.SP1

Closed

Assignee:: Flavia Rainone

Reporter:: Jan Stourac

Votes:: 0 Vote for this issue

Watchers:: 7 Start watching this issue

Created:: 2023/06/09 12:28 PM

Updated:: 2024/02/26 1:56 PM

Resolved:: 2023/06/27 3:12 PM

Details

Description

Attachments

Issue Links

Activity

People

Dates