Commit 854dba6
http2: stop reading from socket if writes are in progress
If a write to the underlying socket finishes asynchronously, that
means that we cannot write any more data at that point without waiting
for it to finish. If this happens, we should also not be producing any
more input.
This is part of mitigating CVE-2019-9511/CVE-2019-9517.
Backport-PR-URL: #29124
PR-URL: #29122
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>1 parent a319168 commit 854dba6Copy full SHA for 854dba6
File tree
Expand file treeCollapse file tree
2 files changed
+20
-1
lines changedOpen diff view settings
Filter options
- src
Expand file treeCollapse file tree
2 files changed
+20
-1
lines changedOpen diff view settings
Collapse file
+18-1Lines changed: 18 additions & 1 deletion
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| ||
1585 | 1585 | |
1586 | 1586 | |
1587 | 1587 | |
| 1588 | + |
| 1589 | + |
| 1590 | + |
1588 | 1591 | |
1589 | 1592 | |
1590 | 1593 | |
| 1594 | + |
| 1595 | + |
| 1596 | + |
| 1597 | + |
| 1598 | + |
| 1599 | + |
1591 | 1600 | |
1592 | 1601 | |
1593 | 1602 | |
| ||
1627 | 1636 | |
1628 | 1637 | |
1629 | 1638 | |
| 1639 | + |
1630 | 1640 | |
1631 | 1641 | |
1632 | | - |
| 1642 | + |
| 1643 | + |
1633 | 1644 | |
| 1645 | + |
1634 | 1646 | |
1635 | 1647 | |
1636 | 1648 | |
| ||
1757 | 1769 | |
1758 | 1770 | |
1759 | 1771 | |
| 1772 | + |
| 1773 | + |
1760 | 1774 | |
1761 | 1775 | |
1762 | 1776 | |
| ||
1766 | 1780 | |
1767 | 1781 | |
1768 | 1782 | |
| 1783 | + |
| 1784 | + |
1769 | 1785 | |
1770 | 1786 | |
| 1787 | + |
1771 | 1788 | |
1772 | 1789 | |
1773 | 1790 | |
|
Collapse file
+2Lines changed: 2 additions & 0 deletions
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| ||
384 | 384 | |
385 | 385 | |
386 | 386 | |
| 387 | + |
| 388 | + |
387 | 389 | |
388 | 390 | |
389 | 391 | |
|
0 commit comments