The official NGINX Open Source repository.
Go to file
Piotr Sikora 71a6b600c2 HTTP/2: reject self-dependent streams.
Per RFC7540, a stream cannot depend on itself.

Previously, this requirement was enforced on PRIORITY frames, but not on
HEADERS frames and due to the implementation details nginx worker would
crash (stack overflow) while opening self-dependent stream.

Found with afl-fuzz.

Signed-off-by: Piotr Sikora <piotrsikora@google.com>
2015-10-01 20:25:55 -07:00
auto Configure: style fixes for autoconf.err. 2015-10-23 18:21:33 -07:00
conf Added the REQUEST_SCHEME parameter. 2015-06-05 22:23:26 +03:00
contrib Contrib: add more directives to vim syntax. 2014-10-22 15:31:19 +02:00
docs nginx-1.9.5-RELEASE 2015-09-22 17:36:21 +03:00
misc Updated OpenSSL used for win32 builds. 2015-08-17 18:09:20 +03:00
src HTTP/2: reject self-dependent streams. 2015-10-01 20:25:55 -07:00
.hgtags release-1.9.5 tag 2015-09-22 17:36:22 +03:00