Benoit Chesneau 0a736ea4a2 fix: keep _body_receiver alive across the keepalive smuggling gate ...

The smuggling guard added in #3614 reads self._body_receiver after
_handle_http_request returns to refuse keepalive on a body that did
not finish framing.  But _handle_http_request's finally cleared the
receiver before returning, so the gate always saw None and let
keepalive proceed unconditionally.  Move the clear into the
connection loop's per-iteration cleanup (it already had one there
for the same purpose).

Adds an end-to-end regression test that pipelines a partial-body POST
followed by a smuggled GET and asserts the second request is not
served and the transport closes.

2026-05-03 21:03:49 +02:00

..

config

chore: prepare release 25.0.2

2026-02-06 08:21:18 +01:00

ctl

Use user-writable default path for control socket (#3551)

2026-03-23 20:08:03 +01:00

dirty

feat(dirty): add TTIN/TTOU signal support for dynamic worker scaling

2026-02-12 23:52:12 +01:00

docker

Update ASGI compatibility grid - 438/444 tests passing

2026-04-04 03:00:41 +02:00

requests

chore: require gunicorn_h1c >=0.6.5 and drop last python_only marker

2026-04-20 07:29:47 +02:00

workers

Remove eventlet from test dependencies

2026-03-22 17:50:32 +01:00

conftest.py

test: skip fast parser on PyPy (gunicorn_h1c C extension is CPython-only)

2026-04-19 23:48:18 +02:00

support_dirty_app.py

feat(dirty): add class attribute workers support and e2e tests

2026-02-01 03:04:35 +01:00

support_dirty_apps.py

test(dirty): add multi-app routing tests

2026-01-25 10:23:25 +01:00

support.py

chore: prepare release 25.0.2

2026-02-06 08:21:18 +01:00

t.py

class Name(object): -> class Name:

2024-04-22 03:33:30 +02:00

test_arbiter.py

fix: lazy import dirty module for gevent compatibility

2026-02-03 01:15:39 +01:00

test_asgi_callback_parser.py

Integrate gunicorn_h1c 0.6.3 with InvalidChunkExtension support

2026-03-26 15:46:51 +01:00

test_asgi_compliance.py

Fix ASGI disconnect handling for Django-style apps

2026-04-02 23:55:27 +02:00

test_asgi_disconnect.py

refactor: split BodyReceiver._closed into transport vs body-wait

2026-05-03 20:42:55 +02:00

test_asgi_error_handling.py

Add ASGI test suite enhancement with 134 new tests

2026-04-03 09:09:16 +02:00

test_asgi_forwarded_headers.py

Add ASGI test suite enhancement with 134 new tests

2026-04-03 09:09:16 +02:00

test_asgi_header_security.py

Add ASGI test suite enhancement with 134 new tests

2026-04-03 09:09:16 +02:00

test_asgi_http_scope.py

Add raw_path to mock requests in tests

2026-03-22 17:07:08 +01:00

test_asgi_invalid_requests.py

fix: reject asterisk-form request-target outside OPTIONS (RFC 9112 section 3.2.4)

2026-04-19 10:43:01 +02:00

test_asgi_keepalive_smuggling.py

fix: keep _body_receiver alive across the keepalive smuggling gate

2026-05-03 21:03:49 +02:00

test_asgi_lifespan.py

Add ASGI test suite enhancement with 134 new tests

2026-04-03 09:09:16 +02:00

test_asgi_parser_validation.py

Fix ASGI callback parser header validation

2026-03-26 06:32:15 +01:00

test_asgi_protocol_compat.py

Fix RFC 9110 section reference: 8.6 not 15.2

2026-04-04 03:10:52 +02:00

test_asgi_protocol_http.py

Add ASGI test suite enhancement with 134 new tests

2026-04-03 09:09:16 +02:00

test_asgi_streaming.py

fix: drop body framing on HEAD/204/304 even when framework set it

2026-05-03 20:17:00 +02:00

test_asgi_uwsgi.py

Add uWSGI protocol support to ASGI worker (#3467)

2026-01-25 14:45:07 +01:00

test_asgi_valid_requests.py

fix: address six WSGI/ASGI parser and protocol findings

2026-05-03 18:19:08 +02:00

test_asgi_websocket_enhanced.py

Add ASGI test suite enhancement with 134 new tests

2026-04-03 09:09:16 +02:00

test_asgi_websocket_protocol.py

Fix WebSocket race condition in callback-based _read_exact()

2026-03-23 13:08:57 +01:00

test_asgi_worker.py

fix: address six WSGI/ASGI parser and protocol findings

2026-05-03 18:19:08 +02:00

test_config.py

Use user-writable default path for control socket (#3551)

2026-03-23 20:08:03 +01:00

test_control_socket_integration.py

test: poll for control socket re-creation after SIGHUP

2026-05-03 19:13:40 +02:00

test_dirty_app.py

feat(dirty): add class attribute workers support and e2e tests

2026-02-01 03:04:35 +01:00

test_dirty_arbiter.py

feat(dirty): update arbiter for binary protocol

2026-02-11 23:03:40 +01:00

test_dirty_client.py

fix: resolve lint issues in dirty arbiter modules

2026-01-25 10:21:18 +01:00

test_dirty_config.py

feat: add dirty arbiters for long-running blocking operations

2026-01-25 10:21:18 +01:00

test_dirty_errors.py

feat(dirty): add per-app worker allocation for memory optimization

2026-02-01 02:40:09 +01:00

test_dirty_hooks.py

feat: add dirty arbiters for long-running blocking operations

2026-01-25 10:21:18 +01:00

test_dirty_integration.py

feat(dirty): update client for binary protocol

2026-02-11 23:12:44 +01:00

test_dirty_protocol.py

feat(dirty): implement binary protocol

2026-02-11 22:58:43 +01:00

test_dirty_stash.py

feat(dirty): add stash - global shared state between workers (#3503)

2026-02-12 21:45:49 +01:00

test_dirty_tlv.py

fix(dirty): convert dict int keys to strings in TLV encoder

2026-02-11 23:39:53 +01:00

test_dirty_worker.py

feat(dirty): update worker for binary protocol

2026-02-11 23:01:21 +01:00

test_early_hints.py

fix: validate headers in early_hints callback to match process_headers

2026-04-13 17:21:24 +08:00

test_gthread.py

fix(gthread): prevent thread pool exhaustion from slow clients

2026-02-19 15:21:01 +01:00

test_gtornado.py

tornado: Require Tornado 6.5.0+ for security fixes

2026-01-23 00:02:01 +01:00

test_header_policy_parity.py

fix: address six WSGI/ASGI parser and protocol findings

2026-05-03 18:19:08 +02:00

test_http2_alpn.py

fix(http2): ALPN negotiation for gevent/eventlet workers

2026-01-28 13:42:48 +01:00

test_http2_async_connection.py

fix(http2): achieve 100% h2spec compliance (146/146 tests)

2026-01-27 15:42:42 +01:00

test_http2_config.py

fix(http2): validate frame size per RFC 7540 (16384-16777215)

2026-01-27 10:51:29 +01:00

test_http2_connection.py

chore: remove integration test file and trim docstring

2026-04-01 11:57:03 +11:00

test_http2_errors.py

Add HTTP/2 tests

2026-01-27 09:57:32 +01:00

test_http2_integration.py

Add HTTP/2 tests

2026-01-27 09:57:32 +01:00

test_http2_request.py

feat(http2): add stream priority support (RFC 7540 Section 5.3)

2026-01-27 11:44:33 +01:00

test_http2_stream.py

fix: prevent HTTP/2 ASGI request body duplication

2026-03-26 14:15:14 +11:00

test_http.py

fix: tighten keepalive gate and scope finish_body byte cap

2026-05-03 18:37:45 +02:00

test_invalid_requests.py

fix: reject asterisk-form request-target outside OPTIONS (RFC 9112 section 3.2.4)

2026-04-19 10:43:01 +02:00

test_logger.py

chore: prepare release 25.0.2

2026-02-06 08:21:18 +01:00

test_pidfile.py

drop long-default - coding: utf-8

2024-04-22 03:33:14 +02:00

test_python_protocol.py

Add callback-based HTTP parser for ASGI protocol

2026-03-21 23:24:23 +01:00

test_reload.py

chore: prepare release 25.0.2

2026-02-06 08:21:18 +01:00

test_signal_integration.py

Skip SIGINT shutdown test on PyPy

2026-03-23 14:10:05 +01:00

test_sock.py

drop long-default - coding: utf-8

2024-04-22 03:33:14 +02:00

test_ssl.py

drop long-default - coding: utf-8

2024-04-22 03:33:14 +02:00

test_statsd.py

chore: prepare release 25.0.2

2026-02-06 08:21:18 +01:00

test_systemd.py

drop long-default - coding: utf-8

2024-04-22 03:33:14 +02:00

test_util.py

drop long-default - coding: utf-8

2024-04-22 03:33:14 +02:00

test_uwsgi.py

uwsgi: Add native uWSGI binary protocol support

2026-01-22 18:32:17 +01:00

test_valid_requests.py

Integrate gunicorn_h1c 0.4.1 exception types and limit parameters

2026-03-22 13:43:18 +01:00

treq_asgi.py

Add InvalidChunkExtension mapping and fast parser support for ASGI tests (#3565)

2026-03-31 03:07:56 +02:00

treq.py

Integrate gunicorn_h1c 0.6.3 with InvalidChunkExtension support

2026-03-26 15:46:51 +01:00