http: fix out-of-order 'finish' bug in pipelining
authorFedor Indutny <fedor@indutny.com>
Sat, 26 Sep 2015 03:36:06 +0000 (23:36 -0400)
committerRod Vagg <rod@vagg.org>
Mon, 5 Oct 2015 11:33:08 +0000 (22:33 +1100)
commit99943e189d7abd978cc7798bf768c4487920b365
tree49740ce7298f1b3f49c4e792fa92fceea4570f72
parent9faf4c6fcfefadb2c79b6a4458458cbd97997f69
http: fix out-of-order 'finish' bug in pipelining

Changes to `stream_base.cc` are required to support empty writes.
Fixes CVE-2015-7384, https://github.com/nodejs/node/issues/3138

Fix: https://github.com/nodejs/node/issues/2639
PR-URL: https://github.com/nodejs/node/pull/3128
lib/_http_outgoing.js
src/stream_base.cc
test/parallel/test-http-pipeline-regr-2639.js [new file with mode: 0644]