)]}'
{
  "commit": "5451f901292ee84f0d432d3ff1857545d7e6e36a",
  "tree": "9ed4b8c7bf4dd9508713994fba8ead78a3c8863a",
  "parents": [
    "90ab32153ceaf1f1590ddfeaf54e13840a5396a8"
  ],
  "author": {
    "name": "Ruslan Ermilov",
    "email": "ru@nginx.com",
    "time": "Tue Nov 06 16:29:49 2018 +0300"
  },
  "committer": {
    "name": "Ruslan Ermilov",
    "email": "ru@nginx.com",
    "time": "Tue Nov 06 16:29:49 2018 +0300"
  },
  "message": "HTTP/2: limit the number of idle state switches.\n\nAn attack that continuously switches HTTP/2 connection between\nidle and active states can result in excessive CPU usage.\nThis is because when a connection switches to the idle state,\nall of its memory pool caches are freed.\n\nThis change limits the maximum allowed number of idle state\nswitches to 10 * http2_max_requests (i.e., 10000 by default).\nThis limits possible CPU usage in one connection, and also\nimposes a limit on the maximum lifetime of a connection.\n\nInitially reported by Gal Goldshtein from F5 Networks.\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "17d7cad04201e21c0e30f2b329b04a4b65072c3d",
      "old_mode": 33188,
      "old_path": "src/http/v2/ngx_http_v2.c",
      "new_id": "12214e1578a553400f110ff7fd9e09436a1c1aa4",
      "new_mode": 33188,
      "new_path": "src/http/v2/ngx_http_v2.c"
    },
    {
      "type": "modify",
      "old_id": "e8eaebb25553e7666029d1cd3e42b5fbed9efb73",
      "old_mode": 33188,
      "old_path": "src/http/v2/ngx_http_v2.h",
      "new_id": "bec22160e4e89ae429d8b135ba1f54a73a245883",
      "new_mode": 33188,
      "new_path": "src/http/v2/ngx_http_v2.h"
    }
  ]
}