tree d29d7ec5d317b288a30b1a880889db85422acb40
parent 4de0eba8488f7d7b471d60da76d815c69e44fecb
author Willy Tarreau <w@1wt.eu> 1556526021 +0200
committer Willy Tarreau <w@1wt.eu> 1556526021 +0200
encoding latin1

BUG/MEDIUM: mux-h2: properly deal with too large headers frames

In h2c_decode_headers(), now that we support CONTINUATION frames, we
try to defragment all pending frames at once before processing them.
However if the first is exactly full and the second cannot be parsed,
we don't detect the problem and we wait for the next part forever due
to an incorrect check on exit; we must abort the processing as soon as
the current frame remains full after defragmentation as in this case
there is no way to make forward progress.

Thanks to Yves Lafon for providing traces exhibiting the problem.

This must be backported to 1.9.