[v8.x] http2: mitigate reported DoS attacks - #29124

Closed

addaleax wants to merge 19 commits into

nodejs:v8.xfrom

addaleax:http2-fixes-v8.x

Commits on Aug 13, 2019

http2: improve http2 code a bit

jasnell
authored and
addaleax
committed
4d09a44
deps: update nghttp2 to 1.34.0

jasnell
authored and
addaleax
committed
b8b4ba5
deps: update nghttp2 to 1.37.0

gengjiawen
authored and
addaleax
committed
6251b50
deps: update nghttp2 to 1.38.0

gengjiawen
authored and
addaleax
committed
68a44ab
deps: update nghttp2 to 1.39.1

gengjiawen
authored and
addaleax
committed
6a1278b

Commits on Aug 14, 2019

deps: update nghttp2 to 1.39.2
addaleax
committed
6deff8a
http2: improve JS-side debug logging
addaleax
committed
14fd420
http2: only call into JS when necessary for session events
addaleax
committed
dd6b143
http2: do not create ArrayBuffers when no DATA received
addaleax
committed
f717523
http2: limit number of rejected stream openings
addaleax
committed
7652406
http2: limit number of invalid incoming frames
addaleax
committed
871393f
http2: handle 0-length headers better
addaleax
committed
a722e8c
http2: shrink default `vector::reserve()` allocations
addaleax
committed
cda3bad
http2: consider 0-length non-end DATA frames an error
addaleax
committed
4993fa7
http2: stop reading from socket if writes are in progress
addaleax
committed
6a341af
http2: pause input processing if sending output
addaleax
committed
bc112af
http2: allow security revert for Ping/Settings Flood
addaleax
committed
6912e21
test: apply test-http2-max-session-memory-leak from v12.x
addaleax
committed
320fbea
fixup! deps: update nghttp2 to 1.39.2
addaleax
committed
5db3a94