Skip to content

HTTP/3: Validate headers successfully parsed to end #38643

Closed
@JamesNK

Description

@JamesNK

QPackDecoder.Decode is designed to be resumable. i.e. it can read multiple blocks of data. However, there is no validation today that the decoder ends in a finished state. A request could come in with truncated headers, and the decoder could end halfway through parsing headers.

Metadata

Metadata

Assignees

Labels

HTTP3area-networkingIncludes servers, yarp, json patch, bedrock, websockets, http client factory, and http abstractions

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions