arturobernalg opened a new pull request, #703: URL: https://github.com/apache/httpcomponents-core/pull/703
For oversized HTTP/2 field blocks, continue processing the complete block before reporting the header list constraint. This keeps the HPACK dynamic table synchronized as required by RFC 9113 section [10.5.1](https://www.rfc-editor.org/rfc/rfc9113.html?utm_source=chatgpt.com#section-10.5.1). Also tighten Huffman end-of-input validation according to RFC 7541 [section 5.2](https://www.rfc-editor.org/rfc/rfc7541.html?utm_source=chatgpt.com#section-5.2). Padding longer than seven bits, padding that is not a prefix of the EOS code, and EOS encoded as a symbol are treated as decoding errors. The header list size check now accepts a field section whose size is exactly equal to the configured maximum and uses a long accumulator to avoid integer overflow. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
