-
Bug
-
Resolution: Fixed
-
P4
-
None
-
b05
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8299591 | 17.0.7-oracle | kiran kumar J | P4 | Resolved | Fixed | b01 |
JDK-8301705 | 17.0.7 | Goetz Lindenmaier | P4 | Resolved | Fixed | b01 |
JDK-8350327 | 11.0.28-oracle | Hamza Ben Yazid | P4 | Resolved | Fixed | master |
ShortResponseBody$ReplyingServer could simply ignore requests that don't target the expected URI (or reply with 500), instead of simply asserting:
=======================================================
String query = uriPath.getRawQuery();
if (query == null) {
out.println("Request headers: [" + headers + "]");
+ continue;
}
assert query != null : "null query for uriPath: " + uriPath;
=======================================================
SSLVariableLengthServer: got connection PlainVariableLengthServer: got connection PRI *
Request headers: [HTTP/2.0
]
Unexpected exception in server: java.lang.AssertionError: null query for uriPath: *
java.lang.AssertionError: null query for uriPath: *
at ShortResponseBody$ReplyingServer.run(ShortResponseBody.java:507)
=======================================================
String query = uriPath.getRawQuery();
if (query == null) {
out.println("Request headers: [" + headers + "]");
+ continue;
}
assert query != null : "null query for uriPath: " + uriPath;
=======================================================
SSLVariableLengthServer: got connection PlainVariableLengthServer: got connection PRI *
Request headers: [HTTP/2.0
]
Unexpected exception in server: java.lang.AssertionError: null query for uriPath: *
java.lang.AssertionError: null query for uriPath: *
at ShortResponseBody$ReplyingServer.run(ShortResponseBody.java:507)
- backported by
-
JDK-8299591 ShortResponseBody could be made more resilient to rogue connections
-
- Resolved
-
-
JDK-8301705 ShortResponseBody could be made more resilient to rogue connections
-
- Resolved
-
-
JDK-8350327 ShortResponseBody could be made more resilient to rogue connections
-
- Resolved
-
- links to
-
Commit openjdk/jdk17u-dev/7224cbe0
-
Commit openjdk/jdk/9ccae707
-
Review openjdk/jdk17u-dev/1133
-
Review openjdk/jdk/9329
(2 links to)