Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

netty: Limit number of frames client can cause server to enqueue #6056

Merged
merged 1 commit into from
Aug 13, 2019

Conversation

ejona86
Copy link
Member

@ejona86 ejona86 commented Aug 13, 2019

Http2ControlFrameLimitEncoder is from Netty. It is copied here as a
temporary measure until we upgrade to the version of Netty that includes
the class.

See CVE-2019-9515

Http2ControlFrameLimitEncoder is from Netty. It is copied here as a
temporary measure until we upgrade to the version of Netty that includes
the class.
@ejona86 ejona86 changed the title Limit number of frames client can cause server to enqueue netty: Limit number of frames client can cause server to enqueue Aug 13, 2019
@ejona86 ejona86 merged commit 9fcfb5b into grpc:master Aug 13, 2019
@ejona86 ejona86 deleted the ctrlframe-limit branch August 13, 2019 17:24
@lock lock bot locked as resolved and limited conversation to collaborators Nov 11, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants