]> Cypherpunks.ru repositories - gostls13.git/commit
[release-branch.go1.20] net/http: regenerate h2_bundle.go
authorDamien Neil <dneil@google.com>
Fri, 6 Oct 2023 21:16:27 +0000 (14:16 -0700)
committerGopher Robot <gobot@golang.org>
Tue, 10 Oct 2023 16:18:02 +0000 (16:18 +0000)
commite175f27f58aa7b9cd4d79607ae65d2cd5baaee68
tree835226dafe19f0a5be01eacf712931ca84de2ee9
parent68f9a6e2addc828246992e66e79c6a51a32d1d71
[release-branch.go1.20] net/http: regenerate h2_bundle.go

Pull in a security fix from x/net/http2:
http2: limit maximum handler goroutines to MaxConcurrentStreamso

For #63417
Fixes #63426
Fixes CVE-2023-39325

Change-Id: I6e32397323cd9b4114c990fcc9d19557a7f5f619
Reviewed-on: https://team-review.git.corp.google.com/c/golang/go-private/+/2047401
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Security TryBots <security-trybots@go-security-trybots.iam.gserviceaccount.com>
Run-TryBot: Damien Neil <dneil@google.com>
Reviewed-by: Ian Cottrell <iancottrell@google.com>
Reviewed-on: https://go-review.googlesource.com/c/go/+/534255
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
Reviewed-by: Damien Neil <dneil@google.com>
TryBot-Bypass: Dmitri Shuralyov <dmitshur@google.com>
Reviewed-by: Michael Pratt <mpratt@google.com>
Auto-Submit: Dmitri Shuralyov <dmitshur@google.com>
src/cmd/internal/moddeps/moddeps_test.go
src/net/http/h2_bundle.go