Wasmtime GitHub notifications bot (Oct 29 2026 at 17:26): Wasmtime GitHub notifications bot (Oct 29 2026 at 17:26):pchickey opened PR #15070 from pchickey:fix_ghsa_h4wp_main to bytecodealliance:main:
and comprehensively test that p2 and p3 both handle all of the corner cases correctly. This includes adding a new testing mechanism where the upstream server responds with a malformed content-length headers, which make it through a hole in hyper's implementation to the guest as an immutable fields.
<!--
Please make sure you include the following information:
If this work has been discussed elsewhere, please include a link to that
conversation. If it was discussed in an issue, just mention "issue #...".Explain why this change is needed. If the details are in an issue already,
this can be brief.Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.htmlPlease review the Bytecode Alliance's AI tool usage policy at
https://github.com/bytecodealliance/governance/blob/main/AI_TOOL_POLICY.mdPlease ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->
Wasmtime GitHub notifications bot (Oct 29 2026 at 17:26):pchickey removed the review request for wasmtime-wasi-reviewers from PR #15070.
Wasmtime GitHub notifications bot (Oct 29 2026 at 17:26):pchickey requested rvolosatovs for a review on PR #15070.
Wasmtime GitHub notifications bot (Oct 29 2026 at 17:26):pchickey requested wasmtime-wasi-reviewers for a review on PR #15070.
Wasmtime GitHub notifications bot (Oct 29 2026 at 17:26):pchickey removed the review request for wasmtime-core-reviewers from PR #15070.
Wasmtime GitHub notifications bot (Oct 29 2026 at 17:26):pchickey requested dicej for a review on PR #15070.
Wasmtime GitHub notifications bot (Oct 29 2026 at 17:26):pchickey requested wasmtime-core-reviewers for a review on PR #15070.
Wasmtime GitHub notifications bot (Oct 29 2026 at 19:20)::thumbs_up: cfallin submitted PR review.
Wasmtime GitHub notifications bot (Oct 29 2026 at 19:20):cfallin added PR #15070 wasi-http p2: fix corner case allowing malformed content-length headers to the merge queue.
Wasmtime GitHub notifications bot (Oct 29 2026 at 22:21)::check: cfallin merged PR #15070.
Wasmtime GitHub notifications bot (Oct 29 2026 at 22:21):cfallin removed PR #15070 wasi-http p2: fix corner case allowing malformed content-length headers from the merge queue.
Last updated: Oct 31 2026 at 23:03 UTC