# HG changeset patch # User Ruslan Ermilov <ru@nginx.com> # Date 1541510975 -10800 # Node ID d4448892a2943f27e5360705c719bfd045c8ef26 # Parent e5069816039b75b1653a4c7c2f982a1ca8d9f9af HTTP/2: flood detection. Fixed uncontrolled memory growth in case peer is flooding us with some frames (e.g., SETTINGS and PING) and doesn't read data. Fix is to limit the number of allocated control frames. diff -r e5069816039b -r d4448892a294 src/http/v2/ngx_http_v2.h --- a/src/http/v2/ngx_http_v2.h Tue Nov 06 16:29:18 2018 +0300 +++ b/src/http/v2/ngx_http_v2.h Tue Nov 06 16:29:35 2018 +0300 @@ -120,6 +120,7 @@ ngx_http_connection_t *http_connection; ngx_uint_t processing; + ngx_uint_t frames; size_t send_window; size_t recv_window;