]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4a9ec66) | patch
BUG/MEDIUM: h3: reject client push stream
authorAmaury Denoyelle <adenoyelle@haproxy.com>
Tue, 26 May 2026 08:25:54 +0000 (10:25 +0200)
committerAmaury Denoyelle <adenoyelle@haproxy.com>
Tue, 26 May 2026 11:52:03 +0000 (13:52 +0200)
commit433cce7af1b332d387ad65688590fd19093e3e3a
treedd3b7e38132327fb2c621ce581bbe93ffd10183dtree | snapshot
parent4a9ec66fd89cc55521e6dac42d881b435b95b50ccommit | diff
BUG/MEDIUM: h3: reject client push stream

HTTP/3 push streams can only be opened by a server instance. The
specification mandates that the connection must be closed if a server
receives a client-initiated push stream.

This patch should ensure that it is not possible to exploit
unidirectional streams for an unexpected usage.

This must be backported up to 2.6.
src/h3.c diff | blob | history
haproxy upstream