On Wed, Apr 21, 2021 at 01:53:32PM +0200, Christopher Faulet wrote:
> Le 21/04/2021 à 08:48, Maciej Zdeb a écrit :
> > I'm very happy you managed to reproduce a similar issue! :)
> The fix was merge in upstream :
> 
> * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
>    (http://git.haproxy.org/?p=haproxy.git;a=commit;h=07f88d75)
> 
> It has not been backported yet. But it may be manually applied on the 2.3 and 
> 2.2 if required. If so, optionally, this other one may be applied too :
> 
> * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
>    (http://git.haproxy.org/?p=haproxy.git;a=commit;h=cb1847c7)
Thanks for these patches and the other nghttp patch you sent.

I'll try get a local build out in our systems (2.2), but I'm worried
based on our backtraces that the patches aren't going to be fixed by
this, because HTTP/2 isn't used in our systems yet (it's on the
roadmap).

-- 
Robin Hugh Johnson
E-Mail     : robb...@orbis-terrarum.net
Home Page  : http://www.orbis-terrarum.net/?l=people.robbat2
GnuPG FP   : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85

Attachment: signature.asc
Description: PGP signature

Reply via email to