)]}'
{
  "commit": "826ccf0ecc4a1df4f4fddc76778966e841bf7a01",
  "tree": "05dfffbc156ab8c2995037279f1dee7b1396fd85",
  "parents": [
    "cd7e167a57ddd54edae5effb09022a8d7e955c7c"
  ],
  "author": {
    "name": "Ruslan Ermilov",
    "email": "ru@nginx.com",
    "time": "Tue Nov 06 16:29:49 2018 +0300"
  },
  "committer": {
    "name": "Ruslan Ermilov",
    "email": "ru@nginx.com",
    "time": "Tue Nov 06 16:29:49 2018 +0300"
  },
  "message": "HTTP/2: limit the number of idle state switches.\n\nAn attack that continuously switches HTTP/2 connection between\nidle and active states can result in excessive CPU usage.\nThis is because when a connection switches to the idle state,\nall of its memory pool caches are freed.\n\nThis change limits the maximum allowed number of idle state\nswitches to 10 * http2_max_requests (i.e., 10000 by default).\nThis limits possible CPU usage in one connection, and also\nimposes a limit on the maximum lifetime of a connection.\n\nInitially reported by Gal Goldshtein from F5 Networks.\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "8089ddd58492a545c5bdabfe41517bfe8cfb2568",
      "old_mode": 33188,
      "old_path": "src/http/v2/ngx_http_v2.c",
      "new_id": "9571e710b782e88554f39b2c7d2cab2b32f91fd0",
      "new_mode": 33188,
      "new_path": "src/http/v2/ngx_http_v2.c"
    },
    {
      "type": "modify",
      "old_id": "e8eaebb25553e7666029d1cd3e42b5fbed9efb73",
      "old_mode": 33188,
      "old_path": "src/http/v2/ngx_http_v2.h",
      "new_id": "bec22160e4e89ae429d8b135ba1f54a73a245883",
      "new_mode": 33188,
      "new_path": "src/http/v2/ngx_http_v2.h"
    }
  ]
}