-
Bug
-
Resolution: Done
-
Minor
-
1.4.0.Final
-
None
In current implementation for HTTP2 protocol, there is no check that WINDOW_UPDATE frame received from peer has non-zero deltaWindowSize value.
According to the specification https://tools.ietf.org/html/rfc7540#section-6.9:
'A receiver MUST treat the receipt of a WINDOW_UPDATE frame with an
flow-control window increment of 0 as a stream error (Section 5.4.2)
of type PROTOCOL_ERROR; errors on the connection flow-control window
MUST be treated as a connection error (Section 5.4.1).'
- is cloned by
-
JBEAP-6167 (7.0.z) HTTP2 WINDOW_UPDATE delta is non-zero check
- Closed
-
JBEAP-6191 (7.1.z) HTTP2 WINDOW_UPDATE delta is non-zero check
- Closed