You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by "arturobernalg (via GitHub)" <gi...@apache.org> on 2026/09/29 12:16:48 UTC
[PR] Reject H2 DATA on reserved streams [httpcomponents-core]
arturobernalg opened a new pull request, #709:
URL: https://github.com/apache/httpcomponents-core/pull/709
RFC 9113 Section 5.1 restricts the frame types that can be received while a stream is in a reserved state.
For a `reserved (remote)` stream, receiving a frame other than `HEADERS`, `RST_STREAM`, or `PRIORITY` must be treated as a connection error of type `PROTOCOL_ERROR`. `DATA` is therefore not permitted before the reserved stream has been activated by `HEADERS`.
The current DATA path accepts a reserved stream and passes the payload to the stream handler.
This change rejects DATA frames received on reserved streams with a connection `PROTOCOL_ERROR` and adds a regression test covering DATA received on a `reserved (remote)` stream created by `PUSH_PROMISE`.
RFC 9113 Section 5.1 — Stream States, `reserved (remote)`:
https://www.rfc-editor.org/rfc/rfc9113.html#section-5.1
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org
Re: [PR] Reject H2 DATA on reserved streams [httpcomponents-core]
Posted by "arturobernalg (via GitHub)" <gi...@apache.org>.
arturobernalg commented on PR #709:
URL: https://github.com/apache/httpcomponents-core/pull/709#issuecomment-5904232335
> @arturobernalg Please cherry-pick to `5.4.x`
done
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org
Re: [PR] Reject H2 DATA on reserved streams [httpcomponents-core]
Posted by "arturobernalg (via GitHub)" <gi...@apache.org>.
arturobernalg merged PR #709:
URL: https://github.com/apache/httpcomponents-core/pull/709
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org