Web Hack List

Collected research

HPACK Bombing Apache

Explains how HPACK expansion, repeated-header merging and APR allocation lifetime exhaust Apache HTTP/2 memory despite nominal request limits. Long names with empty values evade accounting while temporary strings remain allocated; the maintainer describes scratch buffering, occurrence counting and earlier pool release as complementary fixes.

Record

Researcher
Stefan Eissing
Published by
icing’s blog
Date
Topic
Other

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Stefan Eissing, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .