http2: mitigate reported DoS attacks - #29122

Closed

addaleax wants to merge 13 commits into

nodejs:masterfrom

addaleax:http2-fixes

Commits on Aug 14, 2019

deps: update nghttp2 to 1.39.2
addaleax
committed
46c1da1
http2: improve JS-side debug logging
addaleax
committed
cc4b589
http2: only call into JS when necessary for session events
addaleax
committed
85512ec
http2: do not create ArrayBuffers when no DATA received
addaleax
committed
d642202
http2: limit number of rejected stream openings
addaleax
committed
f33d342
http2: limit number of invalid incoming frames
addaleax
committed
c1ff7e7
http2: handle 0-length headers better
addaleax
committed
dc51a63
http2: shrink default `vector::reserve()` allocations
addaleax
committed
bfcae45
http2: consider 0-length non-end DATA frames an error
addaleax
committed
cc17632
http2: stop reading from socket if writes are in progress
addaleax
committed
c13022c
http2: pause input processing if sending output
addaleax
committed
164ac5b
http2: allow security revert for Ping/Settings Flood
addaleax
committed
81f52dc
fixup! deps: update nghttp2 to 1.39.2
addaleax
committed
8b1cd59