[HTTPCORE-673] AbstractH2StreamMultiplexer only partially consumes unknown settings

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.1
• Fix Version/s: 5.0.4, 5.1.1, 5.2-alpha1
• Component/s: HttpCore
• Assignee: Unassigned
• Reporter: Andy Wilkinson
• Created: 13/Apr/21 10:59
• Updated: 01/May/21 17:19
• Resolved: 18/Apr/21 06:06

Description

I originally reported this to the Jetty project but they have identified that the problem is in HttpCore's AbstractH2StreamMultiplexer. Jetty 10 has added support for SETTINGS_ENABLE_CONNECT_PROTOCOL. When consuming the settings frame, AbstractH2StreamMultiplexer consumes the code but, as it has no H2Param for it, it does not consume the value. This partial consumption results in an failure later on.

The problem can be reproduced using this sample project.