]> git.kaiwu.me - nginx.git/commit
Upstream: reject zero WINDOW_UPDATE increments
authorfelix h <felix314159@users.noreply.github.com>
Wed, 5 Aug 2026 17:07:20 +0000 (19:07 +0200)
committerVinay Kumar Tokala <vinaykumar1591@gmail.com>
Mon, 10 Aug 2026 10:24:23 +0000 (15:54 +0530)
commit3c65267a0c60e616bce9789978795c54e18456c6
treef29a951a2dbd9f17dbfca808c3856aaad40b802a
parentdea68dbf126f40a8acd09bac885a955be459162e
Upstream: reject zero WINDOW_UPDATE increments

The HTTP/2 proxy and gRPC upstream clients accepted WINDOW_UPDATE
frames with a zero flow-control window increment.  RFC 9113 requires
such frames to be handled as PROTOCOL_ERROR at stream or connection
scope.

Reject these frames as invalid upstream responses.
src/http/modules/ngx_http_grpc_module.c
src/http/modules/ngx_http_proxy_v2_module.c