Piotr Sikora 71a6b600c2 HTTP/2: reject self-dependent streams. ...

Per RFC7540, a stream cannot depend on itself.

Previously, this requirement was enforced on PRIORITY frames, but not on
HEADERS frames and due to the implementation details nginx worker would
crash (stack overflow) while opening self-dependent stream.

Found with afl-fuzz.

Signed-off-by: Piotr Sikora <piotrsikora@google.com>

2015-10-01 20:25:55 -07:00

auto

Configure: style fixes for autoconf.err.

2015-10-23 18:21:33 -07:00

conf

Added the REQUEST_SCHEME parameter.

2015-06-05 22:23:26 +03:00

contrib

Contrib: add more directives to vim syntax.

2014-10-22 15:31:19 +02:00

docs

nginx-1.9.5-RELEASE

2015-09-22 17:36:21 +03:00

misc

Updated OpenSSL used for win32 builds.

2015-08-17 18:09:20 +03:00

src

HTTP/2: reject self-dependent streams.

2015-10-01 20:25:55 -07:00

.hgtags

release-1.9.5 tag

2015-09-22 17:36:22 +03:00

S

Description

An official read-only mirror of http://hg.nginx.org/nginx/ which is updated hourly. Pull requests on GitHub cannot be accepted and will be automatically closed. The proper way to submit changes to nginx is via the nginx development mailing list, see http://nginx.org/en/docs/contributing_changes.html

BSD-2-Clause

122 MiB

Languages

C 97.7%

Vim Script 1.7%

XS 0.4%

Perl 0.1%