Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

test OOM by control frames attack #615

Open
wants to merge 11 commits into
base: master
Choose a base branch
from
Open

Conversation

kingluo
Copy link
Contributor

@kingluo kingluo commented Apr 24, 2024

part of #612

tests for tempesta-tech/tempesta#2108

@kingluo kingluo marked this pull request as ready for review April 24, 2024 13:23
t_stress/test_flood.py Outdated Show resolved Hide resolved
t_stress/test_flood.py Outdated Show resolved Hide resolved
t_stress/test_flood.py Outdated Show resolved Hide resolved
t_stress/test_flood.py Outdated Show resolved Hide resolved
t_stress/test_flood.py Outdated Show resolved Hide resolved
@RomanBelozerov
Copy link
Contributor

and you need to add these tests to tests_disabled_tcpseg.json

kingluo and others added 6 commits May 15, 2024 15:29
- they are no stress tests anymore, now they are tests for `max_queued_control_frames` directive. We don't need a stress tests because TempestaFW has ways to protect against such an attack;
- all tests work on DeproxyClientH2;
- add tests for default and other values;
…p2_general/test_max_queued_control_frames.py`
change expected number of dmesg warnings. TempestaFW doesn't always output a warning in dmesg
@RomanBelozerov RomanBelozerov self-requested a review May 27, 2024 14:43
client.send_bytes(client.h2_connection.data_to_send())
self.assertTrue(client.wait_for_ack_settings())

client.make_request(client.create_request(method="GET", headers=[]))
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There is no need to request a large response now, because the sockbuf is already set to a small enough size. Also we don't need the backend, because control-frame-slow-read does not involve the backend.

@RomanBelozerov RomanBelozerov force-pushed the jinhua/fix-1346-flood branch 2 times, most recently from fb27281 to 11076fe Compare June 4, 2024 10:47
@kingluo kingluo linked an issue Aug 12, 2024 that may be closed by this pull request
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

http2: tests for CVE-2019-9512/9517
2 participants