arturobernalg opened a new pull request, #1132: URL: https://github.com/apache/tomcat/pull/1132
RFC 9113, section 4.3 states: > An endpoint that receives any frame other than CONTINUATION while receiving a header block MUST treat that as a connection error (Section 5.4.1) of type PROTOCOL_ERROR. `Http2Parser.validateFrame()` threw a connection error of type `COMPRESSION_ERROR` when a non-CONTINUATION, non-RST_STREAM frame arrived on the **same stream** as an open header block. The correct error code per the RFC is `PROTOCOL_ERROR`. Fix: change the error code from `COMPRESSION_ERROR` to `PROTOCOL_ERROR` in the `wrongFrameType` branch of `validateFrame()`. Add `TestHttp2Section_4_3#testHeaderContinuationInterleavedDataSameStream` to prove the violation (sends a DATA frame on the same stream while a header block is in progress) and verify the fix. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
