tree 44300da9b586a26930b769794618596eccd48bb3
parent 51d644aca6b8eca07b6bd2f5ea435998bf73fa92
author Brad Fitzpatrick <bradfitz@golang.org> 1455140700 +0000
committer Brad Fitzpatrick <bradfitz@golang.org> 1455141210 +0000

transport: don't crash if peer sends an empty header field name

The grpc-http2 transport doesn't validate hpack-decoded field names to be
valid http2 field names before checking their first byte. Had it verified
first and found that the empty string is illegal, this crash wouldn't happen,
but currently a malicious request can crash a gRPC server by sending an empty
hpack string.