Skip to content

Validate gRPC HPACK request fields#37

Open
xintenseapple wants to merge 1 commit into
freenginx:defaultfrom
xintenseapple:fix/issue-28-grpc-hpack-max-field
Open

Validate gRPC HPACK request fields#37
xintenseapple wants to merge 1 commit into
freenginx:defaultfrom
xintenseapple:fix/issue-28-grpc-hpack-max-field

Conversation

@xintenseapple

Copy link
Copy Markdown

Summary:

  • Validate gRPC request HPACK field lengths before using fixed HPACK integer reservations for method, path, authority, configured headers, and pass-through headers.

Verification:

  • git diff --check; ./auto/configure --with-http_v2_module --without-http_rewrite_module --without-http_gzip_module; make -f objs/Makefile -j2; objs/nginx -t -p "$PWD/" -c conf/nginx.conf

Fixes #28

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

gRPC request serialization overflows on oversized HPACK :path

2 participants