Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-6167

(7.0.z) HTTP2 WINDOW_UPDATE delta is non-zero check

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Minor Minor
    • 7.0.3.CR1, 7.0.3.GA
    • 7.0.2.GA
    • Undertow
    • None
    • EAP 7.0.3

      In current implementation for HTTP2 protocol, there is no check that WINDOW_UPDATE frame received from peer has non-zero deltaWindowSize value.
      According to the specification https://tools.ietf.org/html/rfc7540#section-6.9:
      'A receiver MUST treat the receipt of a WINDOW_UPDATE frame with an
      flow-control window increment of 0 as a stream error (Section 5.4.2)
      of type PROTOCOL_ERROR; errors on the connection flow-control window
      MUST be treated as a connection error (Section 5.4.1).'

              dtikhomi@redhat.com Dmitrii Tikhomirov
              dtikhomi@redhat.com Dmitrii Tikhomirov
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: