mirror of
https://gitea.invidious.io/iv-org/litespeed-quic.git
synced 2024-08-15 00:53:43 +00:00
Release 2.8.4
- [HTTP3] Verify number of bytes in incoming DATA frames against content-length. - [HTTP3] Stop issuing streams credits if peer stops opening QPACK decoder window. This addresses a potential attack whereby client can cause the server to keep allocating memory. See Security Considerations in the QPACK draft. - [BUGFIX] Mini conn: don't shorten max packet size for Q050 and later. - [BUGFIX] Init IETF connection flow controller using correct setting. - Code cleanup and minor fixes.
This commit is contained in:
parent
3f2ab3517e
commit
747be414e2
15 changed files with 286 additions and 59 deletions
12
CHANGELOG
12
CHANGELOG
|
@ -1,3 +1,15 @@
|
|||
2020-01-06
|
||||
- 2.8.4
|
||||
- [HTTP3] Verify number of bytes in incoming DATA frames against
|
||||
content-length.
|
||||
- [HTTP3] Stop issuing streams credits if peer stops opening QPACK
|
||||
decoder window. This addresses a potential attack whereby client
|
||||
can cause the server to keep allocating memory. See Security
|
||||
Considerations in the QPACK draft.
|
||||
- [BUGFIX] Mini conn: don't shorten max packet size for Q050 and later.
|
||||
- [BUGFIX] Init IETF connection flow controller using correct setting.
|
||||
- Code cleanup and minor fixes.
|
||||
|
||||
2019-12-30
|
||||
- 2.8.1
|
||||
- [FEATURE] Use occasional packet number gaps to detect optimistic
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue