Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[UNDERTOW-2511] CVE-2024-4109 At HpackDecoder, make sure that stringBu… #1715

Merged
merged 1 commit into from
Jan 27, 2025

Conversation

fl4via
Copy link
Member

@fl4via fl4via commented Jan 15, 2025

…ilder field does not carry over info from one decode operation to the next one.

Notice that given the nature of Undertow's architecture, we dont have multiple threads invoking the HpackDecoder at the same time

Jira: https://issues.redhat.com/browse/UNDERTOW-2511

…ilder field does not carry over info from one decode operation to the next one.

Notice that given the nature of Undertow's architecture, we dont have multiple threads invoking the HpackDecoder at the same time

Signed-off-by: Flavia Rainone <[email protected]>
@fl4via fl4via added bug fix Contains bug fix(es) next release This PR will be merged before next release or has already been merged (for payload double check) labels Jan 15, 2025
@baranowb baranowb added under verification Currently being verified (running tests, reviewing) before posting a review to contributor waiting CI check Ready to be merged but waiting for CI check waiting peer review PRs that edit core classes might require an extra review labels Jan 21, 2025
@baranowb baranowb removed the waiting peer review PRs that edit core classes might require an extra review label Jan 21, 2025
@fl4via fl4via removed under verification Currently being verified (running tests, reviewing) before posting a review to contributor waiting CI check Ready to be merged but waiting for CI check labels Jan 27, 2025
@fl4via fl4via merged commit 85cb914 into undertow-io:main Jan 27, 2025
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug fix Contains bug fix(es) next release This PR will be merged before next release or has already been merged (for payload double check)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants