[Git][java-team/netty][master] Fix ByteBuf type

Bastien Roucariès (@rouca) gitlab at salsa.debian.org
Mon Apr 6 16:41:27 BST 2026



Bastien Roucariès pushed to branch master at Debian Java Maintainers / netty


Commits:
c549add8 by Bastien Roucariès at 2026-04-06T17:40:35+02:00
Fix ByteBuf type

- - - - -


1 changed file:

- debian/patches/CVE-2026-33870.patch


Changes:

=====================================
debian/patches/CVE-2026-33870.patch
=====================================
@@ -53,10 +53,10 @@ Update the tests to match.
 origin: backport, https://github.com/netty/netty/commit/60e53c99f2e80aef1025e9038e33cdf261ed9819
 ---
  .../http/HttpChunkLineValidatingByteProcessor.java | 170 +++++++++++++++++++
- .../handler/codec/http/HttpObjectDecoder.java      |  73 ++++++--
+ .../handler/codec/http/HttpObjectDecoder.java      |  75 +++++++--
  .../java/io/netty/handler/codec/http/HttpUtil.java |  13 ++
  .../handler/codec/http/HttpRequestDecoderTest.java | 183 ++++++++++++++++++++-
- 4 files changed, 428 insertions(+), 11 deletions(-)
+ 4 files changed, 429 insertions(+), 12 deletions(-)
  create mode 100644 codec-http/src/main/java/io/netty/handler/codec/http/HttpChunkLineValidatingByteProcessor.java
 
 diff --git a/codec-http/src/main/java/io/netty/handler/codec/http/HttpChunkLineValidatingByteProcessor.java b/codec-http/src/main/java/io/netty/handler/codec/http/HttpChunkLineValidatingByteProcessor.java
@@ -236,10 +236,15 @@ index 0000000..6839ce8
 +    }
 +}
 diff --git a/codec-http/src/main/java/io/netty/handler/codec/http/HttpObjectDecoder.java b/codec-http/src/main/java/io/netty/handler/codec/http/HttpObjectDecoder.java
-index 60d4526..e3d8df7 100644
+index 60d4526..be1863d 100644
 --- a/codec-http/src/main/java/io/netty/handler/codec/http/HttpObjectDecoder.java
 +++ b/codec-http/src/main/java/io/netty/handler/codec/http/HttpObjectDecoder.java
-@@ -349,7 +349,8 @@ public abstract class HttpObjectDecoder extends ByteToMessageDecoder {
+@@ -345,11 +345,12 @@ public abstract class HttpObjectDecoder extends ByteToMessageDecoder {
+          * read chunk, read and ignore the CRLF and repeat until 0
+          */
+         case READ_CHUNK_SIZE: try {
+-            AppendableCharSequence line = lineParser.parse(buffer, THROW_INVALID_CHUNK_EXTENSION);
++            ByteBuf line = lineParser.parse(buffer, THROW_INVALID_CHUNK_EXTENSION);
              if (line == null) {
                  return;
              }



View it on GitLab: https://salsa.debian.org/java-team/netty/-/commit/c549add863392de1c30e8ac7c81d34364fcdd834

-- 
View it on GitLab: https://salsa.debian.org/java-team/netty/-/commit/c549add863392de1c30e8ac7c81d34364fcdd834
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-commits/attachments/20260406/ad1664ce/attachment.htm>


More information about the pkg-java-commits mailing list