BUG/MINOR: h2: forbid 'Z' as well in header field names checks
authorzhanhb <6323014+zhanhb@users.noreply.github.com>
Sat, 27 Sep 2025 15:01:32 +0000 (23:01 +0800)
committerChristopher Faulet <cfaulet@haproxy.com>
Thu, 2 Oct 2025 13:38:39 +0000 (15:38 +0200)
commite002dc50f51805f739b868701cf394588abb4ced
tree078446b1bb183a81def7659de3bd35f06169e445
parenta5389cb63c50de603e3bbf64384971ff7f982244
BUG/MINOR: h2: forbid 'Z' as well in header field names checks

The current tests in h2_make_htx_request(), h2_make_htx_response()
and h2_make_htx_trailers() check for an interval between 'A' and 'Z'
for letters in header field names that should be forbidden, but
mistakenly leave the 'Z' out of the forbidden range, resulting in it
being implicitly valid.

This has no real consequences but should be fixed for the sake of
protocol validity checking.

This must be backported to all relevant versions.

(cherry picked from commit 7163d9180cb319db087221a683c0f2d02ffbf0be)
Signed-off-by: Willy Tarreau <w@1wt.eu>
(cherry picked from commit 82b546ff936285f855a02378c38aed8168fd646f)
Signed-off-by: Willy Tarreau <w@1wt.eu>
(cherry picked from commit 970a437c4b612ebb2acac75528dc9e32d1e1b412)
Signed-off-by: Willy Tarreau <w@1wt.eu>
src/h2.c