]> git.ipfire.org Git - thirdparty/suricata.git/commit
http2: limit number of concurrent transactions
authorPhilippe Antoine <pantoine@oisf.net>
Thu, 9 Nov 2023 15:15:36 +0000 (16:15 +0100)
committerVictor Julien <vjulien@oisf.net>
Tue, 6 Feb 2024 14:16:43 +0000 (15:16 +0100)
commit80abc22f6475b6a87a33166729a871203f34d578
tree981db3183df3328518c6ac1656307b584178890e
parent86de7cffa7e8f06fe9d600127e7dabe89c7e81dd
http2: limit number of concurrent transactions

Ticket: 6481

Instead of just setting the old transactions to a drop state so
that they get later cleaned up by Suricata, fail creating new ones.

This is because one call to app-layer parsing can create many
transactions, and quadratic complexity could happen in one
single app-layer parsing because of find_or_create_tx
rust/src/http2/detect.rs
rust/src/http2/http2.rs