fix: bugs by st0o0 · Pull Request #42 · Leberkas-org/TurboHTTP

st0o0 · 2026-06-14T15:56:02Z

No description provided.

…l line

…imeout

…redential leak

…cked

…ody-drain UAF (server)

…ion, not before

…A flow control, half-closed(remote)

…ACK decoder

…ze to the TCP input buffer

…locking intake

…-name misroute

…4/HEAD) responses

… header value)

…able + policy)

…seam

…ontextContainer

…n Turbo-vs-Kestrel diff

…e child

…lloc)

…ool)

…path

…llection path

…oncurrentStack Node alloc)

…K→4K

…mem-h1|mem-h2)

…|h3)

…uestEndpointStage

… path

…ting

st0o0 added 30 commits June 14, 2026 11:30

chore: change git url

5d42884

fix(http1): stop chunked decoder duplicating a stashed partial contro…

a1a58a5

…l line

fix(http1): suppress response body for HEAD requests

42f3637

fix(http2): suppress response body (DATA frames) for HEAD requests

26b7841

fix(http): enforce body-size limit on Content-Length framed bodies

025fc6b

fix(http2): size the HPACK encode buffer to the header block

38625ab

fix(server): stop ApplicationBridgeStage double-emitting on handler t…

51a1804

…imeout

fix(server): bound the cleartext protocol-sniffing window (DoS)

d82c37f

fix(http): tighten Content-Length parsing, dup CL on H1.0, redirect c…

fd16691

…redential leak

fix(http3): replay DATA received while response HEADERS are QPACK-blo…

ab401a8

…cked

fix(http3): process inbound QPACK encoder-stream and guard response b…

ea45c9c

…ody-drain UAF (server)

fix(http3): surface malformed frame bodies as HttpProtocolException

c0a0462

fix(server): check the cleartext sniff cap after protocol identificat…

ab3a40c

…ion, not before

fix(http2): RFC 9113 frame compliance — settings overflow, padded DAT…

d76c134

…A flow control, half-closed(remote)

fix(http2): enforce the advertised HEADER_TABLE_SIZE in the server HP…

4ad285c

…ACK decoder

fix(server): wire MaxConcurrentStreams to QUIC and MaxRequestBufferSi…

ffc4f88

…ze to the TCP input buffer

fix(client): don't retry non-rewindable bodies; stop parked retries b…

a468db0

…locking intake

fix(client): route responses by compacting consumer index to fix same…

f16d3a7

…-name misroute

fix(server): bound the routing Pending queue by propagating backpressure

c2965a8

fix(server): recycle the FeatureCollection on body-suppressed (204/30…

7eabbe5

…4/HEAD) responses

chore(servus): update submodule for non-blocking QUIC listener teardown

26050c6

chore: Configure CommitLint

e6bc54f

perf: Add Kestrel benchmarks for HttpClient

539e99b

fix(http11): Optimize request body pumping for synchronous reads

7db4edf

docs: fix stale integration-test commands in CLAUDE.md

fa76bf9

perf(http11): build request headers once and rent exact-size buffer

9983d41

perf(protocol): drop per-response decode allocations (reason phrase +…

22ecdd1

… header value)

chore: bump servus.akka submodule (graceful FIN close on client socket)

67f48d0

perf(protocol): rent body chunks from a cross-thread ArrayPool

e65bf75

chore: bump servus.akka submodule (vectored writev + IOQueue scheduler)

59d8911

st0o0 added 28 commits June 15, 2026 16:47

perf(server): cut per-request allocations on the H1.1 hot path

05cbf9e

test(benchmarks): add open-loop load driver + allocation profiler

5aaa9f7

feat(pooling): add Microsoft.Extensions.ObjectPool primitive (IResett…

cbad4d6

…able + policy)

feat(pooling): per-connection ConnectionPoolContext

2245c7f

feat(pooling): expose per-connection PoolContext on the server stage …

af2c9ec

…seam

perf(server): pool the feature collection per connection

a9852ca

perf(server): reuse the ASP.NET HttpContext per connection via IHostC…

7da9755

…ontextContainer

test(benchmarks): measure server allocation out-of-process for a clea…

6be2261

…n Turbo-vs-Kestrel diff

test(benchmarks): capture server-only per-type allocation in the serv…

1438ffe

…e child

chore: bump servus.akka submodule (drop SlicedMemoryOwner per-frame a…

de7aa58

…lloc)

test(benchmarks): rank server per-type allocation by bytes not hits

8299508

chore: bump servus.akka submodule (return outbound TransportData to p…

66815bd

…ool)

perf(server): eliminate per-response pipe lock on the buffered write …

6104e05

…path

perf(server): pool TurboHttpRequestFeature on the recycled feature-co…

ab291ed

…llection path

perf(server): cache send delegate and pool PassthroughFramingEncoder

b29c23b

chore: bump servus.akka submodule (array-based transport pool, drop C…

8036740

…oncurrentStack Node alloc)

feat(benchmarks): add H2 and H3 loadtest support (--protocol h2|h3)

961156d

perf(server): pool H2 request feature + reduce QUIC receive buffer 64…

813a730

…K→4K

perf(server): H2 HPACK header block cache for repeated response patterns

29bf831

feat(benchmarks): add in-memory state-machine benchmarks (--protocol …

04eef35

…mem-h1|mem-h2)

fix(benchmarks): use per-connection SocketsHttpHandler for H2/H3 driver

3d86d7b

feat(benchmarks): add client-side benchmarks (--protocol client-h1|h2…

c016e15

…|h3)

fix(client): resolve multi-connection pipeline deadlock in GroupByReq…

0549940

…uestEndpointStage

perf(client): replace ConcurrentStack pools with ObjectPool in client…

f070894

… path

fix(client): decouple substream source creation from upstream pull ga…

7d0cb71

…ting

feat(server): Add ReceiveBufferHint option

6ebd4e3

fix(client): Correct request cancellation logic

6c1b390

docs: fix old docs

e025e18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix: bugs#42

fix: bugs#42
st0o0 wants to merge 58 commits into
release-nextfrom
fix/bugs

st0o0 commented Jun 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

st0o0 commented Jun 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant