Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[UNDERTOW-2056][UNDERTOW-2075][UNDERTOW-2076][UNDERTOW-2077][UNDERTOW-2137] CVE-2022-1259 and related fixes #1477

Merged
merged 5 commits into from May 16, 2023

Conversation

@fl4via fl4via force-pushed the UNDERTOW-2056_2 branch 2 times, most recently from b6f95b4 to f5fb3e1 Compare May 16, 2023 06:00
fl4via and others added 3 commits May 16, 2023 03:04
…* variables before resuming suspending.

Signed-off-by: Flavia Rainone <frainone@redhat.com>
Signed-off-by: Flavia Rainone <frainone@redhat.com>
…ractFramedChannel: suspend is done asap (if in IO thread it's executed immediately, scheduled if not), resume is always postponed to the IO thread.

The boolean vars can be updated immediately but then we need synch all modifications, that update can be in IO thread or not, so synch is needed. We cannot do this in the freed method as we cannot synch on this. So for that case the var is also updated in the IO thread.

Signed-off-by: Flavia Rainone <frainone@redhat.com>
@fl4via fl4via added bug fix Contains bug fix(es) next release This PR will be merged before next release or has already been merged (for payload double check) waiting CI check Ready to be merged but waiting for CI check labels May 16, 2023
@fl4via fl4via merged commit f73e724 into undertow-io:master May 16, 2023
25 checks passed
@fl4via fl4via removed the waiting CI check Ready to be merged but waiting for CI check label May 16, 2023
@fl4via fl4via deleted the UNDERTOW-2056_2 branch May 16, 2023 08:14
@fl4via fl4via removed the next release This PR will be merged before next release or has already been merged (for payload double check) label May 16, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug fix Contains bug fix(es)
Projects
None yet
2 participants