Uploaded image for project: 'Undertow'
  1. Undertow
  2. UNDERTOW-1910

CVE-2021-3629 AbstractFramedStreamSinkChannel.awaitWritable() never returns if peer fails to update HTTP2 window

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Blocker
    • 2.0.40.Final, 2.2.11.Final
    • None
    • Core
    • None

    Description

      On specific occasions (see WFLY-14656), Firefox fails to send WINDOW_UPDATE messages. In this case, the awaitWritable call never returns.

      Attachments

        Issue Links

          causes

          Bug - A problem that impairs or prevents the functions of the product. WFLY-14656 Particular HTTP/2 Ajax requests to JSF resources yield "default task" threads stuck within AbstractFramedStreamSinkChannel.awaitWritable()

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Bug - A problem that impairs or prevents the functions of the product. UNDERTOW-2036 AbstractFramedChannel.awaitWritable does not guard against spurious wakes

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          is incorporated by

          Component Upgrade - A task tracking an update to a bundled component or revision of component upstream of the project. WFCORE-5598 Upgrade Undertow to 2.2.12.Final

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Closed

          Activity

            People

              flaviarnn Flavia Rainone
              flaviarnn Flavia Rainone
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: