An official read-only mirror of http://hg.nginx.org/nginx/ which is updated hourly. Pull requests on GitHub cannot be accepted and will be automatically closed. The proper way to submit changes to nginx is via the nginx development mailing list, see http://nginx.org/en/docs/contributing_changes.html
Go to file
Ruslan Ermilov 60b93594cc HTTP/2: limit the number of idle state switches.
An attack that continuously switches HTTP/2 connection between
idle and active states can result in excessive CPU usage.
This is because when a connection switches to the idle state,
all of its memory pool caches are freed.

This change limits the maximum allowed number of idle state
switches to 10 * http2_max_requests (i.e., 10000 by default).
This limits possible CPU usage in one connection, and also
imposes a limit on the maximum lifetime of a connection.

Initially reported by Gal Goldshtein from F5 Networks.
2018-11-06 16:29:49 +03:00
auto Configure: fixed compiler warnings with "-Wall -Wextra". 2018-07-24 18:46:54 +03:00
conf MIME: added font/woff2 type (ticket #1243). 2018-06-15 17:29:55 +03:00
contrib Contrib: vim syntax, update core and 3rd party module directives. 2018-03-18 11:11:14 +02:00
docs nginx-1.15.5-RELEASE 2018-10-02 18:13:51 +03:00
misc Updated OpenSSL used for win32 builds. 2018-08-28 15:05:41 +03:00
src HTTP/2: limit the number of idle state switches. 2018-11-06 16:29:49 +03:00
.hgtags release-1.15.5 tag 2018-10-02 18:13:52 +03:00