You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by "arturobernalg (via GitHub)" <gi...@apache.org> on 2026/02/19 06:10:26 UTC
[PR] HPACK: reject integer decoding overflow [httpcomponents-core]
arturobernalg opened a new pull request, #627:
URL: https://github.com/apache/httpcomponents-core/pull/627
This change hardens HPACK integer decoding against signed int overflow.
When decoding continuation bytes, the accumulated value can exceed Integer.MAX_VALUE and wrap negative,
which may surface later as unchecked exceptions (e.g. invalid index / length) instead of a clean `HPackException`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org
Re: [PR] HPACK: reject integer decoding overflow [httpcomponents-core]
Posted by "arturobernalg (via GitHub)" <gi...@apache.org>.
arturobernalg merged PR #627:
URL: https://github.com/apache/httpcomponents-core/pull/627
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org