Uploaded image for project: 'RESTEasy'
  1. RESTEasy
  2. RESTEASY-1244

Resteasy swallowing Netty Http decoding exceptions

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 4.0.0.Beta1, 3.5.0.CR1
    • 3.0.13.Final
    • jaxrs
    • None

      When a http decoding exception like TooLongFrameException is thrown by the HttpObjectDecoder (process method), RestEasy is not checking it and processes an incompletely parsed request. The exception is not bubbling up the stack but is accessible in the message object that the request contains.

      As an example, if the header size goes beyond the limit set in NettyJaxrsServer's HttpRequestDecoder instance, it will process the headers under the limit but ignore the headers above the limit.

      I am not sure how other frameworks working on top of Netty do it, but I think Resteasy might need to check the value of request.getDecoderResult().isFailure() in RestEasyHttpRequestDecoder's decode method.

            rsigal@redhat.com Ronald Sigal
            iker.jimenez Iker Jimenez (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: