[squid-dev] [PATCH] Handling syntactically valid requests with higher-than-supported HTTP versions

[Eduard Bagdasaryan]

Hello,

This patch fixes Squid to return 505 (Version Not Supported) error
code for HTTP/2+ versions.

Before this change, when a syntactically valid HTTP/1 request indicated
HTTP major version 2, Squid mangled and forwarded the request as an
HTTP/1 message. Since Squid does not and cannot correctly interpret an
HTTP/1 request using HTTP/2 rules, returning an error and closing the
connection appears to be the only correct action possible.

Also: since HTTPbis prohibits HTTP versions with multi-digits, treat
such requests as invalid.

Attached Co-Advisor result pages for patched and unpatched Squid.


Regards,
Eduard.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: SQUID-168-requests-higher-than-supported-http-versions-t2.patch
Type: text/x-patch
Size: 4683 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-dev/attachments/20160906/8d83bb62/attachment-0001.bin>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-dev/attachments/20160906/8d83bb62/attachment-0002.html>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-dev/attachments/20160906/8d83bb62/attachment-0003.html>