[UNDERTOW-2309][UNDERTOW-2330][UNDERTOW-2331][UNDERTOW-2337][UNDERTOW-2342][UNDERTOW-2304][UNDERTOW-2338] CVE-2023-4639 Backport bug fixes#1552

Merged

fl4via merged 8 commits intoundertow-io:2.2.xfrom fl4via:2.2.x_backport_bug_fixes

Feb 14, 2024

+239-35

Commits on Feb 14, 2024

UNDERTOW-2309 Prevent memory leak in DefaultByteBufferPool

TomasHofman
authored and
fl4via
committed
[UNDERTOW-2330] At HttpReadListener, handle race when connection is shutdown concurrently with buffer allocation
fl4via
committed
[UNDERTOW-2331] At RapidResetDDoSUnitTestCase, accept a smaller number of responses than expected as the result of race condition where client notices the connection is closed by server before proc…
fl4via
committed
[UNDERTOW-2337] Multipart form-data larger than 16KiB is not available through Servlet getParameter API

gaol
authored and
fl4via
committed
[UNDERTOW-2337] Also verify if the value of the part can be retrieved as a parameter
fl4via
committed
[UNDERTOW-2342] CVE-2023-4639 ignore cookie with improper quotes

baranowb
authored and
fl4via
committed
[UNDERTOW-2304] At SslConduit, only delegate handshake task if the task is going to run on a different set of threads than current thread
fl4via
committed
[UNDERTOW-2338] Fix NPE by making sure asyncStart is true only if asyncContext is initialized
fl4via
committed