Bastien Roucariès pushed to branch master at Debian Java Maintainers / netty
Commits: c549add8 by Bastien Roucariès at 2026-04-06T17:40:35+02:00 Fix ByteBuf type - - - - - 1 changed file: - debian/patches/CVE-2026-33870.patch Changes: ===================================== debian/patches/CVE-2026-33870.patch ===================================== @@ -53,10 +53,10 @@ Update the tests to match. origin: backport, https://github.com/netty/netty/commit/60e53c99f2e80aef1025e9038e33cdf261ed9819 --- .../http/HttpChunkLineValidatingByteProcessor.java | 170 +++++++++++++++++++ - .../handler/codec/http/HttpObjectDecoder.java | 73 ++++++-- + .../handler/codec/http/HttpObjectDecoder.java | 75 +++++++-- .../java/io/netty/handler/codec/http/HttpUtil.java | 13 ++ .../handler/codec/http/HttpRequestDecoderTest.java | 183 ++++++++++++++++++++- - 4 files changed, 428 insertions(+), 11 deletions(-) + 4 files changed, 429 insertions(+), 12 deletions(-) create mode 100644 codec-http/src/main/java/io/netty/handler/codec/http/HttpChunkLineValidatingByteProcessor.java diff --git a/codec-http/src/main/java/io/netty/handler/codec/http/HttpChunkLineValidatingByteProcessor.java b/codec-http/src/main/java/io/netty/handler/codec/http/HttpChunkLineValidatingByteProcessor.java @@ -236,10 +236,15 @@ index 0000000..6839ce8 + } +} diff --git a/codec-http/src/main/java/io/netty/handler/codec/http/HttpObjectDecoder.java b/codec-http/src/main/java/io/netty/handler/codec/http/HttpObjectDecoder.java -index 60d4526..e3d8df7 100644 +index 60d4526..be1863d 100644 --- a/codec-http/src/main/java/io/netty/handler/codec/http/HttpObjectDecoder.java +++ b/codec-http/src/main/java/io/netty/handler/codec/http/HttpObjectDecoder.java -@@ -349,7 +349,8 @@ public abstract class HttpObjectDecoder extends ByteToMessageDecoder { +@@ -345,11 +345,12 @@ public abstract class HttpObjectDecoder extends ByteToMessageDecoder { + * read chunk, read and ignore the CRLF and repeat until 0 + */ + case READ_CHUNK_SIZE: try { +- AppendableCharSequence line = lineParser.parse(buffer, THROW_INVALID_CHUNK_EXTENSION); ++ ByteBuf line = lineParser.parse(buffer, THROW_INVALID_CHUNK_EXTENSION); if (line == null) { return; } View it on GitLab: https://salsa.debian.org/java-team/netty/-/commit/c549add863392de1c30e8ac7c81d34364fcdd834 -- View it on GitLab: https://salsa.debian.org/java-team/netty/-/commit/c549add863392de1c30e8ac7c81d34364fcdd834 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ pkg-java-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-java-commits
