Browse Source

http2: correct behaviour for enablePush unpack

The only valid values for enablePush are 0 and 1. If validation
is requested, we should verify that it wasn't set to another
value rather than casting to Boolean regardless of value.

PR-URL: https://github.com/nodejs/node/pull/15167
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de>
canary-base
Anatoli Papirovski 7 years ago
committed by Ruben Bridgewater
parent
commit
c20901a7f5
No known key found for this signature in database GPG Key ID: F07496B3EB3C1762
  1. 14
      lib/internal/http2/core.js
  2. 21
      test/parallel/test-http2-getpackedsettings.js

14
lib/internal/http2/core.js

@ -2547,7 +2547,7 @@ function getUnpackedSettings(buf, options = {}) {
settings.headerTableSize = value; settings.headerTableSize = value;
break; break;
case NGHTTP2_SETTINGS_ENABLE_PUSH: case NGHTTP2_SETTINGS_ENABLE_PUSH:
settings.enablePush = Boolean(value); settings.enablePush = value;
break; break;
case NGHTTP2_SETTINGS_MAX_CONCURRENT_STREAMS: case NGHTTP2_SETTINGS_MAX_CONCURRENT_STREAMS:
settings.maxConcurrentStreams = value; settings.maxConcurrentStreams = value;
@ -2569,6 +2569,9 @@ function getUnpackedSettings(buf, options = {}) {
assertWithinRange('headerTableSize', assertWithinRange('headerTableSize',
settings.headerTableSize, settings.headerTableSize,
0, 2 ** 32 - 1); 0, 2 ** 32 - 1);
assertWithinRange('enablePush',
settings.enablePush,
0, 1);
assertWithinRange('initialWindowSize', assertWithinRange('initialWindowSize',
settings.initialWindowSize, settings.initialWindowSize,
0, 2 ** 32 - 1); 0, 2 ** 32 - 1);
@ -2581,13 +2584,10 @@ function getUnpackedSettings(buf, options = {}) {
assertWithinRange('maxHeaderListSize', assertWithinRange('maxHeaderListSize',
settings.maxHeaderListSize, settings.maxHeaderListSize,
0, 2 ** 32 - 1); 0, 2 ** 32 - 1);
if (settings.enablePush !== undefined &&
typeof settings.enablePush !== 'boolean') {
const err = new errors.TypeError('ERR_HTTP2_INVALID_SETTING_VALUE',
'enablePush', settings.enablePush);
err.actual = settings.enablePush;
throw err;
} }
if (settings.enablePush !== undefined) {
settings.enablePush = !!settings.enablePush;
} }
return settings; return settings;

21
test/parallel/test-http2-getpackedsettings.js

@ -126,6 +126,27 @@ assert.doesNotThrow(() => http2.getPackedSettings({ enablePush: false }));
assert.strictEqual(settings.enablePush, true); assert.strictEqual(settings.enablePush, true);
} }
//should throw if enablePush is not 0 or 1
{
const packed = Buffer.from([
0x00, 0x02, 0x00, 0x00, 0x00, 0x00]);
const settings = http2.getUnpackedSettings(packed, { validate: true });
assert.strictEqual(settings.enablePush, false);
}
{
const packed = Buffer.from([
0x00, 0x02, 0x00, 0x00, 0x00, 0x64]);
assert.throws(() => {
http2.getUnpackedSettings(packed, { validate: true });
}, common.expectsError({
code: 'ERR_HTTP2_INVALID_SETTING_VALUE',
type: RangeError,
message: 'Invalid value for setting "enablePush": 100'
}));
}
//check for what happens if passing {validate: true} and no errors happen //check for what happens if passing {validate: true} and no errors happen
{ {
const packed = Buffer.from([ const packed = Buffer.from([

Loading…
Cancel
Save