Skip to content

Mitigate HTTP/2 HPACK "bomb" amplification (decoded list-size + reassembly caps)#830

Merged
ademar merged 3 commits into
masterfrom
copilot/investigate-http2-security-vulnerability
Jun 3, 2026
Merged

Mitigate HTTP/2 HPACK "bomb" amplification (decoded list-size + reassembly caps)#830
ademar merged 3 commits into
masterfrom
copilot/investigate-http2-security-vulnerability

Hpack: avoid mutual recursion in decodeSimple/decodeSimpleBounded

9846aaa
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

10 warnings
build
succeeded Jun 3, 2026 in 2m 43s