Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 362852 - Websocket missing validation of RSV bits
Summary: Websocket missing validation of RSV bits
Status: RESOLVED FIXED
Alias: None
Product: Jetty
Classification: RT
Component: websocket (show other bugs)
Version: 7.5.4   Edit
Hardware: All All
: P3 normal (vote)
Target Milestone: 7.5.x   Edit
Assignee: Joakim Erdfelt CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-11-03 18:51 EDT by Joakim Erdfelt CLA
Modified: 2011-11-03 19:05 EDT (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Joakim Erdfelt CLA 2011-11-03 18:51:36 EDT
RSV bits must be 0 per the spec.
And since we do not have extension support (yet), the change should trigger a 1002/Protocol Error when any of the 3 RSV bits are non-zero.
Comment 1 Joakim Erdfelt CLA 2011-11-03 19:05:02 EDT
Existing if(STRICT) {} block tests for RSV bit meanings.

Considering this complete in master (already)