Skip to content

v0.2.6

Choose a tag to compare

View all tags
@benoitc benoitc released this 29 May 08:37
· 9 commits to main since this release
v0.2.6
4ac5e97
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security review follow-up: three verified resource-management fixes.

  • Router leak on failed h3 connect: the per-connection router (which traps exits, so the caller link never reaped it) is now stopped on the connect-failure path; the H3 connection is closed when the session fails to start, reaping the router via its monitor.
  • h2 data-loop orphan: the CONNECT-stream loop now monitors both the h2 connection and the session and exits on either 'DOWN', instead of blocking forever. Server and client spawn it identically.
  • Unbounded infinity call: the router open_bidi_stream call is bounded (30s) so an unresponsive H3 connection cannot stall the session.

Adds regression tests for the router leak and data-loop termination. 301 eunit tests pass, xref and dialyzer clean on OTP 29.

Assets 2
Loading