tree 53007dee2c3a1ed34d25e2a6f3c9bc2370741355
parent f51b7fbdc402716c282a2767ecc9a22e7d977316
author Jed Denlea <jed@fastly.com> 1438650044 -0700
committer Russ Cox <rsc@golang.org> 1438803024 +0000

net/http: close server conn after broken trailers

Prior to this change, broken trailers would be handled by body.Read, and
an error would be returned to its caller (likely a Handler), but that
error would go completely unnoticed by the rest of the server flow
allowing a broken connection to be reused.  This is a possible request
smuggling vector.

Fixes #12027.

Change-Id: I077eb0b8dff35c5d5534ee5f6386127c9954bd58
Reviewed-on: https://go-review.googlesource.com/13148
Reviewed-by: Russ Cox <rsc@golang.org>