tree 2de33e43d27ec8647cc3ac00d5c837529cfb4c7f
parent 33c1ef3d66839087eeb741a998f823743ff85794
author Piotr Sikora <piotrsikora@google.com> 1443756355 -0700
committer Piotr Sikora <piotrsikora@google.com> 1443756355 -0700

HTTP/2: reject self-dependent streams.

Per RFC7540, a stream cannot depend on itself.

Previously, this requirement was enforced on PRIORITY frames, but not on
HEADERS frames and due to the implementation details nginx worker would
crash (stack overflow) while opening self-dependent stream.

Found with afl-fuzz.

Signed-off-by: Piotr Sikora <piotrsikora@google.com>