mirror/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git synced 2026-02-06 16:33:27 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
4bc7aa548adcd9ee424c65cd346e94f8749dce64
haproxy/src
History
Amaury Denoyelle 4bc7aa548a BUG/MINOR: quic: reject invalid max_udp_payload size 
Add a checks on received max_udp_payload transport parameters. As
defined per RFC 9000, values below 1200 are invalid, and thus the
connection must be closed with TRANSPORT_PARAMETER_ERROR code.

Prior to this patch, an invalid value was silently ignored.

This should be backported up to 2.6. Note that is relies on previous
patch "MINOR: quic: extend return value on TP parsing".
2025-05-07 15:21:30 +02:00
..
acl.c
…
acme.c
MEDIUM: acme/ssl: remove 'acme ps' in favor of 'acme status'
2025-05-06 15:27:29 +02:00
action.c
…
activity.c
…
applet.c
…
arg.c
…
auth.c
…
backend.c
BUG/MEDIUM: connections: Report connection closing in conn_create_mux()
2025-04-30 17:17:36 +02:00
base64.c
…
buf.c
…
cache.c
…
calltrace.c
…
cbuf.c
…
cebtree-prv.h
…
cebu32_tree.c
…
cebu64_tree.c
…
cebua_tree.c
…
cebub_tree.c
…
cebuib_tree.c
…
cebuis_tree.c
…
cebul_tree.c
…
cebus_tree.c
…
cfgcond.c
…
cfgdiag.c
…
cfgparse-global.c
MINOR: cfgparse-global: add explicit error messages in cfg_parse_global_env_opts
2025-05-02 15:37:45 +02:00
cfgparse-listen.c
…
cfgparse-quic.c
MEDIUM: quic: limit global Tx memory
2025-04-29 15:19:32 +02:00
cfgparse-ssl.c
BUG/MINOR: ssl: can't use crt-store some certificates in ssl-f-use
2025-05-06 21:36:29 +02:00
cfgparse-tcp.c
…
cfgparse-unix.c
…
cfgparse.c
MINOR: cfgparse: visually show the input line on empty args
2025-05-05 16:17:24 +02:00
channel.c
…
check.c
MEDIUM: checks: Make sure we return the tasklet from srv_chk_io_cb
2025-04-25 16:14:26 +02:00
chunk.c
…
cli.c
MEDIUM: mcli: replicate the current mode when enterin the worker process
2025-04-28 20:21:06 +02:00
clock.c
…
compression.c
…
connection.c
BUG/MEDIUM: connections: Report connection closing in conn_create_mux()
2025-04-30 17:17:36 +02:00
cpu_topo.c
…
cpuset.c
…
debug.c
MINOR: debug: bump the dump buffer to 8kB
2025-05-07 10:02:58 +02:00
dgram.c
…
dict.c
…
dns_ring.c
…
dns.c
BUG/MINOR: dns: prevent ds accumulation within dss
2025-04-29 21:20:54 +02:00
dynbuf.c
…
eb32sctree.c
…
eb32tree.c
…
eb64tree.c
…
ebimtree.c
…
ebistree.c
…
ebmbtree.c
…
ebpttree.c
…
ebsttree.c
…
ebtree.c
…
errors.c
…
ev_epoll.c
…
ev_evports.c
…
ev_kqueue.c
…
ev_poll.c
…
ev_select.c
…
event_hdl.c
…
extcheck.c
…
fcgi-app.c
…
fcgi.c
…
fd.c
…
filters.c
…
fix.c
…
flt_bwlim.c
…
flt_http_comp.c
…
flt_spoe.c
…
flt_trace.c
…
freq_ctr.c
…
frontend.c
…
guid.c
…
h1_htx.c
…
h1.c
…
h2.c
…
h3_stats.c
…
h3.c
…
haproxy.c
MEDIUM: quic: limit global Tx memory
2025-04-29 15:19:32 +02:00
hash.c
…
hlua_fcn.c
MINOR: hlua_fcn: enforce yield after *_get_stats() methods
2025-04-30 17:00:31 +02:00
hlua.c
MINOR: hlua: ignore "tune.lua.bool-sample-conversion" if set after "lua-load"
2025-05-02 14:38:37 +02:00
hpack-dec.c
…
hpack-enc.c
…
hpack-huff.c
…
hpack-tbl.c
…
hq_interop.c
…
http_acl.c
…
http_act.c
…
http_ana.c
…
http_client.c
…
http_conv.c
…
http_ext.c
…
http_fetch.c
…
http_htx.c
…
http_rules.c
…
http.c
…
htx.c
…
init.c
…
jws.c
…
jwt.c
…
lb_chash.c
…
lb_fas.c
…
lb_fwlc.c
BUILD: leastconn: fix build warning when building without threads on old machines
2025-04-28 16:50:34 +02:00
lb_fwrr.c
…
lb_map.c
…
lb_ss.c
…
limits.c
…
linuxcap.c
…
listener.c
BUG/MAJOR: listeners: transfer connection accounting when switching listeners
2025-04-25 18:47:11 +02:00
log.c
…
lru.c
…
mailers.c
…
map.c
…
mjson.c
…
mqtt.c
…
mux_fcgi.c
MEDIUM: mux_fcgi: Make sure we return the tasklet from fcgi_deferred_shut
2025-04-25 16:14:26 +02:00
mux_h1.c
BUG/MINOR: mux-h1: Fix trace message in h1_detroy() to not relay on connection
2025-04-30 14:44:42 +02:00
mux_h2.c
BUG/MINOR: proxy: only use proxy_inc_fe_cum_sess_ver_ctr() with frontends
2025-05-06 11:01:39 +02:00
mux_pt.c
…
mux_quic.c
BUG/MINOR: proxy: only use proxy_inc_fe_cum_sess_ver_ctr() with frontends
2025-05-06 11:01:39 +02:00
mux_spop.c
Revert "BUG/MEDIUM: mux-spop: Handle CLOSING state and wait for AGENT DISCONNECT frame"
2025-05-06 13:43:59 +02:00
mworker-prog.c
…
mworker.c
…
namespace.c
…
ncbuf.c
…
pattern.c
…
payload.c
…
peers.c
MEDIUM: peers: Give up if we fail to take locks in hot path
2025-05-02 15:27:55 +02:00
pipe.c
…
pool.c
…
proto_quic.c
MINOR: quic: account for global congestion window
2025-04-29 15:19:32 +02:00
proto_rhttp.c
…
proto_sockpair.c
…
proto_tcp.c
MINOR: tcp: add support for setting TCP_NOTSENT_LOWAT on both sides
2025-04-29 12:13:42 +02:00
proto_udp.c
…
proto_uxdg.c
…
proto_uxst.c
…
protocol.c
…
proxy.c
…
qmux_http.c
…
qmux_trace.c
…
qpack-dec.c
…
qpack-enc.c
…
qpack-tbl.c
…
queue.c
BUG/MAJOR: queue: lock around the call to pendconn_process_next_strm()
2025-05-06 18:59:54 +02:00
quic_ack.c
…
quic_cc_bbr.c
BUG/MINOR: quic: ensure cwnd limits are always enforced
2025-04-29 15:10:06 +02:00
quic_cc_cubic.c
BUG/MINOR: quic: ensure cwnd limits are always enforced
2025-04-29 15:10:06 +02:00
quic_cc_drs.c
…
quic_cc_newreno.c
BUG/MINOR: quic: ensure cwnd limits are always enforced
2025-04-29 15:10:06 +02:00
quic_cc_nocc.c
MINOR: quic: rename min/max fields for congestion window algo
2025-04-29 15:10:06 +02:00
quic_cc.c
MEDIUM: quic: limit global Tx memory
2025-04-29 15:19:32 +02:00
quic_cid.c
…
quic_cli.c
MINOR: quic: rename min/max fields for congestion window algo
2025-04-29 15:10:06 +02:00
quic_conn.c
BUG/MEDIUM: quic: Let it be known if the tasklet has been released.
2025-05-02 11:09:28 +02:00
quic_enc.c
…
quic_fctl.c
…
quic_frame.c
…
quic_loss.c
…
quic_openssl_compat.c
…
quic_pacing.c
…
quic_retransmit.c
…
quic_retry.c
…
quic_rules.c
…
quic_rx.c
…
quic_sock.c
MEDIUM: quic: Make sure we return the tasklet from quic_accept_run
2025-04-25 16:14:26 +02:00
quic_ssl.c
MINOR: quic: extend return value during TP parsing
2025-05-07 15:19:52 +02:00
quic_stats.c
…
quic_stream.c
…
quic_tls.c
…
quic_token.c
…
quic_tp.c
BUG/MINOR: quic: reject invalid max_udp_payload size
2025-05-07 15:21:30 +02:00
quic_trace.c
…
quic_tx.c
…
raw_sock.c
…
regex.c
…
resolvers.c
CLEANUP: proxy: mention that px->conn_retries isn't relevant in some cases
2025-04-29 21:21:19 +02:00
ring.c
…
sample.c
…
server_state.c
…
server.c
…
session.c
MINOR: tcp: add support for setting TCP_NOTSENT_LOWAT on both sides
2025-04-29 12:13:42 +02:00
sha1.c
…
shctx.c
…
signal.c
…
sink.c
CLEANUP: proxy: mention that px->conn_retries isn't relevant in some cases
2025-04-29 21:21:19 +02:00
slz.c
…
sock_inet.c
MINOR: sock-inet: detect apparent IPv6 connectivity
2025-04-24 17:52:28 +02:00
sock_unix.c
…
sock.c
…
ssl_ckch.c
MINOR: ssl/cli: add a '-t' option to 'show ssl sni'
2025-04-28 11:35:11 +02:00
ssl_clienthello.c
BUILD: ssl: Fix wolfssl build
2025-04-30 15:50:10 +02:00
ssl_crtlist.c
…
ssl_gencert.c
MINOR: Add 'conn' param to ssl_sock_chose_sni_ctx
2025-04-30 11:11:26 +02:00
ssl_ocsp.c
MINOR: ssl: Add ocsp stapling callback traces
2025-04-30 11:11:26 +02:00
ssl_sample.c
…
ssl_sock.c
BUG/MEDIUM: connections: Report connection closing in conn_create_mux()
2025-04-30 17:17:36 +02:00
ssl_trace.c
BUILD: ssl: Fix wolfssl build
2025-04-30 15:50:10 +02:00
ssl_utils.c
MINOR: ssl: add function to extract X509 notBefore date in time_t
2025-05-02 16:01:32 +02:00
stats-file.c
…
stats-html.c
…
stats-json.c
…
stats-proxy.c
MINOR: promex: expose ST_I_PX_RATE (current_session_rate)
2025-04-28 12:23:20 +02:00
stats.c
…
stconn.c
…
stick_table.c
MINOR: stick-tables: add "ipv4" as an alias for the "ip" type
2025-05-07 10:11:55 +02:00
stream.c
…
systemd.c
…
task.c
CLEANUP: tasks: use the local state, not t->state, to check for tasklets
2025-05-02 11:09:28 +02:00
tcp_act.c
…
tcp_rules.c
…
tcp_sample.c
…
tcpcheck.c
…
thread.c
MINOR: threads: turn the full lock debugging to DEBUG_THREAD=2
2025-04-28 16:50:34 +02:00
time.c
…
tools.c
BUG/MINOR: tools: only fill first empty arg when not out of range
2025-05-07 07:25:29 +02:00
trace.c
…
uri_auth.c
…
uri_normalizer.c
…
vars.c
…
version.c
…
wdt.c
…
xprt_handshake.c
BUG/MEDIUM: connections: Report connection closing in conn_create_mux()
2025-04-30 17:17:36 +02:00
xprt_quic.c
…