Update NEWS for 1.0.0 release
This commit is contained in:
Tatsuhiro Tsujikawa
parent
715fba31fc
commit
19ba4301a6
497
NEWS
497
NEWS
|
|
@ -1,480 +1,73 @@
|
||||||
spdylay 0.3.8
|
spdylay 1.0.0
|
||||||
=============
|
=============
|
||||||
|
|
||||||
Release Note
|
Release Note
|
||||||
------------
|
------------
|
||||||
|
|
||||||
This release fixes stability problems in shrpx. Shrpx gets several
|
This release adds several enhancements to the spdyct and shrpx and
|
||||||
new options and operation modes in this release. See the changes below
|
strict checks for name/value pairs. It fixes the bug that server can
|
||||||
for details. Spdycat and spdyd get colored verbose output. Build
|
not push the stream against server initiated stream ID. The internal
|
||||||
script for Android was added.
|
priority management mechanism is updated so that outbound DATA frames
|
||||||
|
with variety of SPDY priority can interleave more frequently and don't
|
||||||
|
let the low priority streams starve. The development is very stable
|
||||||
|
now, so we'll make this release 1.0.0.
|
||||||
|
|
||||||
Changes
|
Changes
|
||||||
-------
|
-------
|
||||||
|
|
||||||
* Add Android build scripts and document
|
* Adjust priority of outbound DATA frames so that it does not starve
|
||||||
|
others
|
||||||
|
|
||||||
* shrpx: Fix assertion failure in
|
This change makes frames with variety of priority interleave more
|
||||||
SpdyDownstreamConnection::attach_stream_data
|
frequently.
|
||||||
|
|
||||||
* src: Provide timegm replacement and android build fix
|
* Drop priveleges only after listening on possibly priveleged port
|
||||||
|
|
||||||
* Add --without-libxml2 configure option
|
Patch from moparisthebest
|
||||||
|
|
||||||
* Document about flags of spdylay_send_callback and spdylay_recv_callback
|
* Add --honor-cipher-order option to mitigate BEAST attacks
|
||||||
|
|
||||||
* shrpx: Fix not send RST_STREAM when downstream gets valid EOF
|
Patch from moparisthebest
|
||||||
|
|
||||||
* shrpx: Fix WINDOW_UPDATE may block until SpdyUpstream::send()
|
* Fix building on mac os x. "error: invalid suffix on literal; C++11
|
||||||
|
requires a space between literal and identifier"
|
||||||
|
|
||||||
spdy_data_read_callback in SpdyDownstreamConnection calls
|
Patch from snnn
|
||||||
SpdyUpstream::resume_read() which submits WINDOW_UPDATE, but after
|
|
||||||
that they are not call SpdyUpstream::send(). This means that if no
|
|
||||||
pending outgoing data in upstream, then WINDOW_UPDATE is blocked
|
|
||||||
until SpdyUpstream::send() from somewhere. This change adds
|
|
||||||
SpdyUpstream::send() to resume_read() so that WINDOW_UPDATE is not
|
|
||||||
blocked.
|
|
||||||
|
|
||||||
* shrpx: Fix blocking upstream RST_STREAM and propagate REFUSED_STREAM
|
* Allow server initiated stream ID in associated-stream-id
|
||||||
|
|
||||||
This change fixes upstream RST_STREAM is blocked until
|
* spdycat, shrpx: TLS SNI enhancements
|
||||||
SpdyUpstream::send() is called. Now downstream REFUSED_STREAM is
|
|
||||||
propagated to upstream client so that client can reset request. The
|
|
||||||
RST_STREAM error code when downstream went wrong is changed from
|
|
||||||
CANCEL to INTERNAL_ERROR.
|
|
||||||
|
|
||||||
* shrpx: Remove strerror(3) from code which may run in multi-thread
|
shrpx:
|
||||||
|
* Added an option to set the TLS SNI extension between shrpx and the
|
||||||
|
origin on the command line
|
||||||
|
|
||||||
* shrpx: Add non-TLS SPDY backend connection support
|
spdycat:
|
||||||
|
* If the user set an explicit host header ( using --headers ) use that
|
||||||
|
name for the TLS SNI extension.
|
||||||
|
* Added the handshake completion time to the verbose output
|
||||||
|
* The gettimeofday call in get_time was using the incorrect structure
|
||||||
|
( I believe )
|
||||||
|
* In update_html_parser it was submitting the request regardless of
|
||||||
|
the return value of add_request.
|
||||||
|
|
||||||
Use --backend-spdy-no-tls to disable TLS on backend SPDY connection.
|
Patch from Stephen Ludin
|
||||||
The SPDY protocol used there must be configured by
|
|
||||||
--backend-spdy-proto option.
|
|
||||||
|
|
||||||
* spdycat: Add --multiply option
|
* shrpx: Support non-TLS SPDY in frontend connection
|
||||||
|
|
||||||
* spdycli: Fix missing last by with IPv6 addr and check argc
|
* Don't allow control characters in outgoing name/value pairs
|
||||||
|
|
||||||
* spdycat: Fix error handling of spdylay_gzip_inflate()
|
This check is done in spdylay_submit_* family functions and they
|
||||||
|
will return error if they found control characters.
|
||||||
|
|
||||||
* shrpx: More backend EOF handling
|
* Don't pack multiple empty header values in one header field
|
||||||
|
|
||||||
Now we set Downstream::set_response_connection_close(true) for
|
SPDY spec does not allow multiple empty header values in one header
|
||||||
tunneled connections. Also call
|
field. This change makes out-going framer ignore such empty header
|
||||||
Upstream::on_downstream_body_complete() callback when setting
|
value if there is non-empty header value with the same name.
|
||||||
MSG_COMPLETE in SpdySession when RST_STREAM is caught. Clean up EOF
|
|
||||||
handling in https_downstream_readcb.
|
|
||||||
|
|
||||||
* shrpx: Send pending response data before RST_STREAM in tunnel
|
* Fix the incoming last empty header value is not checked properly
|
||||||
connection
|
|
||||||
|
|
||||||
* shprx: Add --backend-http-proxy-uri option
|
This change fixes the bug that spdylay_frame_unpack_nv does not
|
||||||
|
check the size of header value if it is the last value in NULL
|
||||||
Specify proxy URI in the form http://[USER:PASS]PROXY:PORT. USER and
|
separated list.
|
||||||
PASS are optional and if they exist they must be properly
|
|
||||||
percent-encoded. This proxy is used when the backend connection is
|
|
||||||
SPDY. First, make a CONNECT request to the proxy and it connects to
|
|
||||||
the backend on behalf of shrpx. This forms tunnel. After that, shrpx
|
|
||||||
performs SSL/TLS handshake with the downstream through the
|
|
||||||
tunnel. The timeouts when connecting and making CONNECT request can
|
|
||||||
be specified by --backend-read-timeout and --backend-write-timeout
|
|
||||||
options.
|
|
||||||
|
|
||||||
* shrpx: Add --spdy-bridge option
|
|
||||||
|
|
||||||
With --spdy-bridge option, it listens SPDY/HTTPS connections from
|
|
||||||
front end and forwards them to the backend in SPDY. The usage will
|
|
||||||
be written later. This change fixes the crash when more than 2
|
|
||||||
outstanding SpdyDownstreamConnection objects are added to
|
|
||||||
SpdySession and establishing connection to SPDY backend is failed.
|
|
||||||
|
|
||||||
* shrpx: Add --subcert option to add additional certificate/private key
|
|
||||||
|
|
||||||
This option specifies additional certificate and private key
|
|
||||||
file. Shrpx will choose certificates based on the hostname indicated
|
|
||||||
by client using TLS SNI extension. This option can be used multiple
|
|
||||||
times.
|
|
||||||
|
|
||||||
* shrpx: Relay Connection: upgrade header field for HTTP/1.1
|
|
||||||
connections
|
|
||||||
|
|
||||||
* spdycat: Send "accept-encoding: gzip, deflate" header field
|
|
||||||
|
|
||||||
* spdycat: Output error messages to std::cerr
|
|
||||||
|
|
||||||
* spdycat, spdyd: Color verbose output
|
|
||||||
|
|
||||||
* shrpx: Don't return chunked response for pre-HTTP/1.1 request
|
|
||||||
|
|
||||||
* Fix SPDY/3 priority pack and unpack handling
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
spdylay 0.3.7
|
|
||||||
=============
|
|
||||||
|
|
||||||
Release Note
|
|
||||||
------------
|
|
||||||
|
|
||||||
This release updates INTERNAL_ERROR value of GOAWAY frame according to
|
|
||||||
SPDY/3 spec change. The spdycat and spdyd now can operate on
|
|
||||||
non-SSL/TLS SPDY connections. The shrpx now has --client and
|
|
||||||
--client-proxy options to make it accept plain HTTP connection and
|
|
||||||
forward to the backend in SPDY. There are many enhancements to these
|
|
||||||
programs in this release. Please read Changes below.
|
|
||||||
|
|
||||||
Changes
|
|
||||||
-------
|
|
||||||
|
|
||||||
* spdycat: Add -d option to POST data
|
|
||||||
|
|
||||||
* shrpx: Capitalize header field name in HTTP downstream connection
|
|
||||||
|
|
||||||
* shrpx: Add --no-via option
|
|
||||||
|
|
||||||
If --no-via option is given, shrpx does not append to Via header
|
|
||||||
field. If Via header field is received, it is left unaltered.
|
|
||||||
|
|
||||||
* spdycat: Log error when no supported SPDY version was negotiated
|
|
||||||
|
|
||||||
* shrpx: Log status code, method, path and HTTP version in accesslog
|
|
||||||
|
|
||||||
* shrpx: Color HTTP headers in console log
|
|
||||||
|
|
||||||
* shrpx: Color severity level in terminal
|
|
||||||
|
|
||||||
Color severity level if stderr refers to a terminal.
|
|
||||||
|
|
||||||
* shrpx: Read private key's passwd from a file
|
|
||||||
|
|
||||||
This avoids the need to provide the password for your
|
|
||||||
private key interactively.
|
|
||||||
|
|
||||||
It can be used via --private-key-passwd-file or
|
|
||||||
private-key-passwd-file in the given config file. The first line in
|
|
||||||
the file (without \n) will be treated as the passwd. There isn't any
|
|
||||||
validation and all lines after the first one (if any) are ignored.
|
|
||||||
|
|
||||||
The security model behind this is a bit simplistic so I am open to
|
|
||||||
better ideas. Basically your password file should be root:root (700)
|
|
||||||
and you *should* drop root and run as an unprivileged user.
|
|
||||||
|
|
||||||
If the file exists and a line can be read then a callback will be
|
|
||||||
set for the SSL ctxt and it'll feed the passwd when the private key
|
|
||||||
is read (if password is needed).
|
|
||||||
|
|
||||||
If the file exists with the wrong permisions it'll be logged and
|
|
||||||
ignored.
|
|
||||||
|
|
||||||
* spdycat, spdyd: Support SPDY without SSL/TLS
|
|
||||||
|
|
||||||
Use --no-tls option to disable SSL/TLS and specify SPDY protocol
|
|
||||||
version using -2 or -3.
|
|
||||||
|
|
||||||
* shrpx: Add --backend-ipv4 and --backend-ipv6 options.
|
|
||||||
|
|
||||||
* shrpx: Add -v, --version option
|
|
||||||
|
|
||||||
* shrpx: Verify backend server's certificate in client mode
|
|
||||||
|
|
||||||
The -k, --insecure option is added to skip this verification. The
|
|
||||||
system wide trusted CA certificates will be loaded at startup. The
|
|
||||||
--cacert option is added to specify the trusted CA certificate file.
|
|
||||||
|
|
||||||
* shrpx: Check the length of output buffer in write callback
|
|
||||||
|
|
||||||
Possibly because of deferred callback, we may get this callback when
|
|
||||||
the output buffer is not empty.
|
|
||||||
|
|
||||||
* shrpx: Add --client-proxy and --client option
|
|
||||||
|
|
||||||
With --client, instead of accepting SPDY/HTTPS connection, shrpx
|
|
||||||
accepts plain HTTP connection and communicate with backend server in
|
|
||||||
SPDY (SSL/TLS). To use shrpx as a forward proxy, use -p option
|
|
||||||
instead.
|
|
||||||
|
|
||||||
The --client-proxy option is mostly the same with with --client
|
|
||||||
option, but it also requires the request path from frontend must be
|
|
||||||
an absolute URI, suitable for use as a forward proxy.
|
|
||||||
|
|
||||||
* shrpx: Don't send response-body for 304 response
|
|
||||||
|
|
||||||
* Update GOAWAY INTERNAL_ERROR value according to SPDY/3 spec change
|
|
||||||
|
|
||||||
* shrpx: Fix password handling for certs keys
|
|
||||||
|
|
||||||
We should only call daemon() after ListenHandler is instantiated,
|
|
||||||
where SSL_CTX_use_PrivateKey_file is called, otherwise we have no
|
|
||||||
stdin/stdout to get the password for keyfile.
|
|
||||||
|
|
||||||
* spdycat: Handle timeout in connect and SSL/TLS handshake
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
spdylay 0.3.6
|
|
||||||
=============
|
|
||||||
|
|
||||||
Release Note
|
|
||||||
------------
|
|
||||||
|
|
||||||
This release fixes bugs in configure command-line options and spdycat.
|
|
||||||
The client side header block compression was disabled. The
|
|
||||||
on_ctrl_not_send_callback now gets SPDYLAY_ERR_FRAME_TOO_LARGE as
|
|
||||||
error code when packed frame is too large to fit in SPDY frame size
|
|
||||||
limit. Shrpx SPDY proxy mode now announces SPDY/3 as default protocol.
|
|
||||||
|
|
||||||
Changes
|
|
||||||
-------
|
|
||||||
|
|
||||||
* shrpx: Made SPDY/3 default protocol in SPDY proxy mode. The reason
|
|
||||||
why we choose SPDY/2 as default for SPDY prxy was due to Chrome's
|
|
||||||
window update bug. Now its fix is available in Chrome stable, we
|
|
||||||
make SPDY/3 as default.
|
|
||||||
|
|
||||||
* spdycat: Just return in check_response_header if stream_user_data is
|
|
||||||
NULL.
|
|
||||||
|
|
||||||
* spdycat: Add missing break after handling -H option
|
|
||||||
|
|
||||||
* configure: Fix bug that $withval is used where $enableval should be
|
|
||||||
used
|
|
||||||
|
|
||||||
* shrpx: Use request HTTP version in HTTPS upstream response
|
|
||||||
|
|
||||||
* shrpx: Log when SPDY stream is closed
|
|
||||||
|
|
||||||
* Check provisioned frame length when packing a frame. If resultant
|
|
||||||
length of a frame exceeds the maximum value (which is 2**24 - 1 for
|
|
||||||
SPDY/2 and 3), SPDYLAY_ERR_FRAME_TOO_LARGE is used to indicate this
|
|
||||||
error. This error will be notified by on_ctrl_not_send_callback.
|
|
||||||
|
|
||||||
* Disable client side header block compression.
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
spdylay 0.3.5
|
|
||||||
=============
|
|
||||||
|
|
||||||
Release Note
|
|
||||||
------------
|
|
||||||
|
|
||||||
This release fixes the bug that shrpx tries to read response body when
|
|
||||||
HTTP status code is 304 and nonzero Content-Length is returned. The
|
|
||||||
SPDY client and server programs, spdycat, spdyd and shrpx, were moved
|
|
||||||
to src directory. The --enable-src configure option was added to
|
|
||||||
enable/disable to build them. In Python API, Session.resume_data() now
|
|
||||||
returns boolean value to indicate error instead of raising
|
|
||||||
InvalidArgumentError.
|
|
||||||
|
|
||||||
This release was made because the previous release, 0.3.4, did not
|
|
||||||
update library version. Other than updated library version number,
|
|
||||||
anything has not been changed since 0.3.4.
|
|
||||||
|
|
||||||
Changes
|
|
||||||
-------
|
|
||||||
|
|
||||||
* shrpx: Check request_connection_close_ when deciding closing
|
|
||||||
connection. When deciding whether to close the client connection,
|
|
||||||
check request_connection_close_ of Downstream in addition of
|
|
||||||
response_connection_close_. Also we only add "Connection:
|
|
||||||
Keep-Alive" header to the HTTP/1.0 or HTTP/0.9 clients.
|
|
||||||
|
|
||||||
* python: Don't raise exception from Session.resume_data(). In
|
|
||||||
practice, Session.resume_data() will be used without checking there
|
|
||||||
is deferred data or not. Actually, there is no API to check this.
|
|
||||||
So it is better not to raise exception. Instead return False to
|
|
||||||
notify error. If the method succeeds, it returns True.
|
|
||||||
|
|
||||||
* Add --enable-src configure option. When --enable-src is given, the
|
|
||||||
programs in src directory will be built. If --disable-src is given,
|
|
||||||
those programs will not be built. If none of them are given,
|
|
||||||
--enable-src is assumed.
|
|
||||||
|
|
||||||
* Move spdycat, spdyd and shrpx from examples to src. To distinguish
|
|
||||||
the to-be-installed programs and non-installable example source
|
|
||||||
code, the former programs, spdycat, spdydyd and shrpx, were moved to
|
|
||||||
src directory. spdynative was removed from Makefile because it does
|
|
||||||
not appeal to any users much.
|
|
||||||
|
|
||||||
* shrpx: Ignore response body if HTTP status code is 1xx, 204 or 304.
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
spdylay 0.3.4
|
|
||||||
=============
|
|
||||||
|
|
||||||
Release Note
|
|
||||||
------------
|
|
||||||
|
|
||||||
This release fixes the bug that shrpx tries to read response body when
|
|
||||||
HTTP status code is 304 and nonzero Content-Length is returned. The
|
|
||||||
SPDY client and server programs, spdycat, spdyd and shrpx, were moved
|
|
||||||
to src directory. The --enable-src configure option was added to
|
|
||||||
enable/disable to build them. In Python API, Session.resume_data() now
|
|
||||||
returns boolean value to indicate error instead of raising
|
|
||||||
InvalidArgumentError.
|
|
||||||
|
|
||||||
Changes
|
|
||||||
-------
|
|
||||||
|
|
||||||
* shrpx: Check request_connection_close_ when deciding closing
|
|
||||||
connection. When deciding whether to close the client connection,
|
|
||||||
check request_connection_close_ of Downstream in addition of
|
|
||||||
response_connection_close_. Also we only add "Connection:
|
|
||||||
Keep-Alive" header to the HTTP/1.0 or HTTP/0.9 clients.
|
|
||||||
|
|
||||||
* python: Don't raise exception from Session.resume_data(). In
|
|
||||||
practice, Session.resume_data() will be used without checking there
|
|
||||||
is deferred data or not. Actually, there is no API to check this.
|
|
||||||
So it is better not to raise exception. Instead return False to
|
|
||||||
notify error. If the method succeeds, it returns True.
|
|
||||||
|
|
||||||
* Add --enable-src configure option. When --enable-src is given, the
|
|
||||||
programs in src directory will be built. If --disable-src is given,
|
|
||||||
those programs will not be built. If none of them are given,
|
|
||||||
--enable-src is assumed.
|
|
||||||
|
|
||||||
* Move spdycat, spdyd and shrpx from examples to src. To distinguish
|
|
||||||
the to-be-installed programs and non-installable example source
|
|
||||||
code, the former programs, spdycat, spdydyd and shrpx, were moved to
|
|
||||||
src directory. spdynative was removed from Makefile because it does
|
|
||||||
not appeal to any users much.
|
|
||||||
|
|
||||||
* shrpx: Ignore response body if HTTP status code is 1xx, 204 or 304.
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
spdylay 0.3.3
|
|
||||||
=============
|
|
||||||
|
|
||||||
Release Note
|
|
||||||
------------
|
|
||||||
|
|
||||||
This release fixes the segmentation fault error if the name/value
|
|
||||||
pairs which include empty string name are passed as nv argument to
|
|
||||||
spdylay_submit_* functions. Spdycat gets new option to specify
|
|
||||||
arbitrary headers from command line. Shrpx gets new option to specify
|
|
||||||
allowed cipher list. Python wrapper python-spdylay was added.
|
|
||||||
|
|
||||||
Changes
|
|
||||||
-------
|
|
||||||
|
|
||||||
* Add spdylay_npn_get_proto_list() public API function.
|
|
||||||
spdylay_npn_get_proto_list() returns a pointer to the supported SPDY
|
|
||||||
version list. The element of the list is spdylay_npn_proto
|
|
||||||
struct. It contains all SPDY version information this library
|
|
||||||
supports. The application can use this information to configure NPN
|
|
||||||
protocol offerings/selection.
|
|
||||||
|
|
||||||
* Add --enable-example configure option. If --disable-example is used,
|
|
||||||
example programs will not be compiled.
|
|
||||||
|
|
||||||
* Fix error with w64-mingw32 cross compiler.
|
|
||||||
|
|
||||||
* Remove unused zlib.h header file from spdylay.h
|
|
||||||
|
|
||||||
* Fix segmentation fault error if the name/value pairs which include
|
|
||||||
empty string name are passed as nv argument to spdylay_submit_*
|
|
||||||
functions.
|
|
||||||
|
|
||||||
* spdycat: Adding arbitrary headers form the command line. Patch from
|
|
||||||
Stephen Ludin.
|
|
||||||
|
|
||||||
* Fix intptr_t check in configure.ac. Patch from Stephen Ludin.
|
|
||||||
|
|
||||||
* shrpx: add --ciphers option to specify allowed cipher list
|
|
||||||
|
|
||||||
* python: Add Python wrapper for spdylay. It is released separately as
|
|
||||||
python-spdylay package from PyPI.
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
spdylay 0.3.2
|
|
||||||
=============
|
|
||||||
|
|
||||||
Release Note
|
|
||||||
------------
|
|
||||||
|
|
||||||
This release adds many features and options to shrpx, HTTPS/SPDY
|
|
||||||
reverse proxy. Secure SPDY proxy mode was added to shrpx. Spdycat now
|
|
||||||
supports SNI, thanks to the patch contributed by Piotr Sikora.
|
|
||||||
|
|
||||||
Changes
|
|
||||||
-------
|
|
||||||
|
|
||||||
* spdycat: Add support for Server Name Indication (SNI). Patch from
|
|
||||||
Piotr Sikora.
|
|
||||||
|
|
||||||
* spdycat: Use TLSv1_client_method
|
|
||||||
|
|
||||||
* shrpx: Add many new command-line options. It also now supports
|
|
||||||
configuration file. Use http-parser instead of htparse. Add SPDY
|
|
||||||
proxy mode.
|
|
||||||
|
|
||||||
* lib: Take into account shut_flags when accepting DATA frame.
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
spdylay 0.3.1
|
|
||||||
=============
|
|
||||||
|
|
||||||
Release Note
|
|
||||||
------------
|
|
||||||
|
|
||||||
This release fixes the bug that on_ctrl_recv_callback is not called
|
|
||||||
when RST_STREAM is received. It also fixes the bug that
|
|
||||||
on_data_recv_callback and on_data_chunk_recv_callback is called after
|
|
||||||
the stream was closed. A multi-threaded reverse proxy for SPDY/HTTPS
|
|
||||||
is added as an example program.
|
|
||||||
|
|
||||||
Changes
|
|
||||||
-------
|
|
||||||
|
|
||||||
* Added --enable-maintainer-mode configure option If it is enabled,
|
|
||||||
turn on extra compiler warnings.
|
|
||||||
|
|
||||||
* Don't call on_data_recv_callback and on_data_chunk_recv_callback if
|
|
||||||
stream was closed or being closed.
|
|
||||||
|
|
||||||
* Added example program Shrpx: a multi-threaded reverse proxy for
|
|
||||||
SPDY/HTTPS. It accepts SPDY/HTTPS connections and converts them to
|
|
||||||
normal HTTP and forwards to the downstream servers.
|
|
||||||
|
|
||||||
* Fixed bug on_ctrl_recv_callback not called for RST_STREAM
|
|
||||||
|
|
||||||
* Return nonzero exit status if test fails. Fixed failmalloc tests.
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
spdylay 0.3.0
|
|
||||||
=============
|
|
||||||
|
|
||||||
Release Note
|
|
||||||
------------
|
|
||||||
|
|
||||||
This release fixes buffer overrun when a lot of streams are created.
|
|
||||||
SPDYLAY_OPT_MAX_RECV_CTRL_FRAME_BUFFER option was added to control the
|
|
||||||
maximum payload size of the incoming control frames.
|
|
||||||
|
|
||||||
Changes
|
|
||||||
-------
|
|
||||||
|
|
||||||
* Bump up LT version to 2.0.1.
|
|
||||||
|
|
||||||
* Included <functional> from spdy.h
|
|
||||||
|
|
||||||
* Made spdylay_strerror(0) return "Success"
|
|
||||||
|
|
||||||
* Added SPDYLAY_OPT_MAX_RECV_CTRL_FRAME_BUFFER option. This option
|
|
||||||
sets maximum receive buffer size for incoming control frame.
|
|
||||||
Basically the library checks the length field of the incoming
|
|
||||||
control frame. For frames with name/value header block, the library
|
|
||||||
also checks the length of inflated block is also under the
|
|
||||||
limit. This is done while incrementally inflating block. If the
|
|
||||||
length of frames with name/value header block exceeds the limit, the
|
|
||||||
library will issue RST_STREAM with FRAME_TOO_LARGE. For other
|
|
||||||
frames, it will issue GOAWAY.
|
|
||||||
|
|
||||||
* Incremental name/value block decompression
|
|
||||||
|
|
||||||
* Fixed buffer overrun in spdylay_pq_push
|
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue