File _service:tar_scm:CVE-2019-0199-9.patch of Package tomcat

File _service:tar_scm:CVE-2019-0199-9.patch of Package tomcat (Revision b0e81e313573fff34ef7c8bdc89844a7)

Currently displaying revision b0e81e313573fff34ef7c8bdc89844a7 , Show latest

--- tomcat/webapps/docs/config/http2.xml	2019/02/01 10:28:34	1852705
+++ tomcat/webapps/docs/config/http2.xml	2019/02/01 10:28:38	1852706
@@ -188,6 +188,20 @@
       The default value is an empty String (regexp matching disabled).</p>
     </attribute>
 
+    <attribute name="overheadCountFactor" required="false">
+      <p>The factor to apply when counting overhead frames to determine if a
+      connection has too high an overhead and should be closed. The overhead
+      count starts at <code>-10</code>. The count is decreased for each
+      data frame sent or received and each headers frame received. The count is
+      increased by the <code>overheadCountFactor</code>for each setting
+      received, priority frame received and ping received. If the overhead count
+      exceeds zero, the connection is closed. A value of less than
+      <code>1</code> disables this protection. In normal usage a value of
+      <code>3</code> or more will close the connection before any streams can
+      complete. If not specified, a default value of <code>1</code> will be
+      used.</p>
+    </attribute>
+
     <attribute name="readTimeout" required="false">
       <p>The time, in milliseconds, that Tomcat will wait for additional data
       when a partial HTTP/2 frame has been received. Negative values will be