Uploaded image for project: 'RESTEasy'
  1. RESTEasy
  2. RESTEASY-1244

Resteasy swallowing Netty Http decoding exceptions

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 4.0.0.Beta1, 3.5.0.CR1
    • 3.0.13.Final
    • jaxrs
    • None

    Description

      When a http decoding exception like TooLongFrameException is thrown by the HttpObjectDecoder (process method), RestEasy is not checking it and processes an incompletely parsed request. The exception is not bubbling up the stack but is accessible in the message object that the request contains.

      As an example, if the header size goes beyond the limit set in NettyJaxrsServer's HttpRequestDecoder instance, it will process the headers under the limit but ignore the headers above the limit.

      I am not sure how other frameworks working on top of Netty do it, but I think Resteasy might need to check the value of request.getDecoderResult().isFailure() in RestEasyHttpRequestDecoder's decode method.

      Attachments

        Activity

          People

            rsigal@redhat.com Ronald Sigal
            iker.jimenez Iker Jimenez (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: