[jboss-jira] [JBoss JIRA] (WFLY-12305) HPACK decoding huffman-encoded string with EOS symbol

Jan Stourac (Jira) issues at jboss.org
Fri Jul 19 10:10:00 EDT 2019


Jan Stourac created WFLY-12305:
----------------------------------

             Summary: HPACK decoding huffman-encoded string with EOS symbol
                 Key: WFLY-12305
                 URL: https://issues.jboss.org/browse/WFLY-12305
             Project: WildFly
          Issue Type: Bug
          Components: Web (Undertow)
    Affects Versions: 17.0.1.Final
            Reporter: Jan Stourac
            Assignee: Flavia Rainone


During the HTTP2 communication where HPACK is utilized, when client sends inappropriate huffman-encoded string containing EOS symbol, server side is supposed to respond with GOAWAY - compression error, although current implementation of Undertow simply continues and sends DATA frame instead. Relevant [RFC section|https://tools.ietf.org/html/rfc7541#section-5.2].

Note that this issue is probably present for long time in Undertow. Current test started to fail after recent fix in the test itself, [see here|https://github.com/summerwind/h2spec/commit/ce109b0cae4731610dbccded0185c2991d75f29d].

{code:title=Test output}
HPACK: Header Compression for HTTP/2
  5. Primitive Type Representations
    5.2. String Literal Representation
      × 3: Sends a Huffman-encoded string literal representation containing the EOS symbol
        -> The endpoint MUST treat this as a decoding error.
           Expected: GOAWAY Frame (Error Code: COMPRESSION_ERROR)
                     Connection closed
             Actual: DATA Frame (length:1496, flags:0x01, stream_id:1)
{code}



--
This message was sent by Atlassian Jira
(v7.12.1#712002)



More information about the jboss-jira mailing list