diff options
| author | Anna Henningsen <anna@addaleax.net> | 2019-08-12 22:55:16 +0200 |
|---|---|---|
| committer | Michaël Zasso <targos@protonmail.com> | 2019-08-15 09:51:38 +0200 |
| commit | a54af9e1888c01f9a9553eb0e91664a249cabe96 (patch) | |
| tree | 502fc62203de256a1bc14022b0772119aab8f99c /AUTHORS | |
| parent | 474577cf54c3a5f48dec8ab88bd2d03881e2ac02 (diff) | |
| download | node-new-a54af9e1888c01f9a9553eb0e91664a249cabe96.tar.gz | |
http2: limit number of invalid incoming frames
Limit the number of invalid input frames, as they may be pointing
towards a misbehaving peer. The limit is currently set to 1000 but
could be changed or made configurable.
This is intended to mitigate CVE-2019-9514.
PR-URL: https://github.com/nodejs/node/pull/29122
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Diffstat (limited to 'AUTHORS')
0 files changed, 0 insertions, 0 deletions