[PATCH] http2: fix check for `frame->hd.type`
authorhanguanqiang <hanguanqiang@kylinos.cn>
Wed, 9 Apr 2025 11:48:11 +0000 (19:48 +0800)
committerJérémy Lal <kapouer@melix.org>
Thu, 5 Mar 2026 10:05:11 +0000 (11:05 +0100)
commit40d2c69452613d5840533757d980ba39b4fdfc7b
treeedc83e19e7c0d8564894a8b98f857a478aecf9e2
parent295cedb8b4fdf08e2011883426940776c9cac6b6
[PATCH] http2: fix check for `frame->hd.type`

Related to CVE-2025-23085
According to the comment, this should be checking whether
`frame->hd.type` is `NGHTTP2_GOAWAY`, i.e. `0x07` and not `0x03`.

PR-URL: https://github.com/nodejs/node/pull/57644
Refs: https://github.com/nodejs/node/commit/1b693fa03a0d36bc1dc9ec8d95060e3e5ceeee7b
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Gbp-Pq: Topic sec
Gbp-Pq: Name 12-http2-fix-check-for-frame-type-goaway.patch
src/node_http2.cc
test/parallel/test-http2-premature-close.js