Code

Backport for CVE-2023-46589#36

Code

Merged

cesarhernandezgt merged 16 commits intotomitribe:tomcat-10.0.x-TT.xtomitribe/tomcat:tomcat-10.0.x-TT.xfrom cesarhernandezgt:tomcat-10.0.x-TT.x-patchcesarhernandezgt/tomcat:tomcat-10.0.x-TT.x-patchCopy head branch name to clipboardDec 8, 2023

+418-186

Commits

Commits on Dec 8, 2023

• Handle errors consistently

  Show description for 11ad5f5
  

  markt-asf

  authored and

  cesarhernandezgt

  committed
  11ad5f5

• Differentiate request cancellation from a bad request

  Show description for 7f9aab4
  

  markt-asf

  authored and

  cesarhernandezgt

  committed
  7f9aab4

• Use a 400 response for bad requests rather than a 500 response

  

  markt-asf

  authored and

  cesarhernandezgt

  committed
  4e2732a

• Ensure IOException on request read always triggers error handling

  

  markt-asf

  authored and

  cesarhernandezgt

  committed
  77a147e

• Fix back-port

  

  markt-asf

  authored and

  cesarhernandezgt

  committed
  a6add28

• Use sendError() rather than working directly with Coyote response

  Show description for bcd90a1
  

  markt-asf

  authored and

  cesarhernandezgt

  committed
  bcd90a1

• Better message if size limit is reached reading trailer header name

  

  markt-asf

  authored and

  cesarhernandezgt

  committed
  516ab38

• Move BadRequestException so it is visible to coyote package

  Show description for 00e40a0
  

  markt-asf

  authored and

  cesarhernandezgt

  committed
  00e40a0

• Missed files in previous commit

  

  markt-asf

  authored and

  cesarhernandezgt

  committed
  169625a

• Fix back-port

  

  markt-asf

  authored and

  cesarhernandezgt

  committed
  080bcfd

• Use more appropriate exception so a bad request triggers a 400 response

  

  markt-asf

  authored and

  cesarhernandezgt

  committed
  260d9a6

• Better message if size limit is reached reading trailer header value

  

  markt-asf

  authored and

  cesarhernandezgt

  committed
  94e3d90

• Use application provided status code for error page if present

  

  markt-asf

  authored and

  cesarhernandezgt

  committed
  ed83454

• fix Http2TestBase

  cesarhernandezgt

  committed
  23eb398

• commenting out test from 700d7d9

  cesarhernandezgt

  committed
  0edcdbe

• fix TestCharsetCache

  cesarhernandezgt

  committed
  8d91913