7 Star 2 Fork 34

src-openEuler/tomcat
关闭

加入 Gitee
与超过 1400万 开发者一起发现、参与优秀开源项目,私有仓库也完全免费 :)
免费加入
文件
该仓库未声明开源许可证文件(LICENSE),使用请关注具体项目描述及其代码上游依赖。
克隆/下载
CVE-2025-31650-2.patch 1.27 KB
一键复制 编辑 原始数据 按行查看 历史
wk333 提交于 2025-04-29 19:32 +08:00 . Fix CVE-2025-31650, CVE-2025-31651
From b98e74f517b36929f4208506e5adad22cb767baa Mon Sep 17 00:00:00 2001
From: Mark Thomas <markt@apache.org>
Date: Wed, 19 Mar 2025 03:21:50 +0000
Subject: [PATCH] Additional fix for BZ 69614
Origin: https://github.com/apache/tomcat/commit/b98e74f517b36929f4208506e5adad22cb767baa
---
java/org/apache/coyote/http2/Stream.java | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/java/org/apache/coyote/http2/Stream.java b/java/org/apache/coyote/http2/Stream.java
index e8f0d9481c03..ecda8caec811 100644
--- a/java/org/apache/coyote/http2/Stream.java
+++ b/java/org/apache/coyote/http2/Stream.java
@@ -456,6 +456,12 @@ public final void emitHeader(String name, String value) throws HpackException {
setIncremental(p.getIncremental());
} catch (IOException ioe) {
// Not possible with StringReader
+ } catch (IllegalArgumentException iae) {
+ // Invalid priority header field values should be ignored
+ if (log.isTraceEnabled()) {
+ log.trace(sm.getString("http2Parser.processFramePriorityUpdate.invalid", getConnectionId(),
+ getIdAsString()), iae);
+ }
}
break;
}
Loading...
马建仓 AI 助手
尝试更多
代码解读
代码找茬
代码优化
1
https://gitee.com/src-openeuler/tomcat.git
git@gitee.com:src-openeuler/tomcat.git
src-openeuler
tomcat
tomcat
master

搜索帮助