Skip to content

Auto-port 4.1: Fix UnsupportedOperationException in readTrailingHeaders#16437

Merged
normanmaurer merged 1 commit into4.1from
auto-port-pr-16412-to-4.1
Mar 12, 2026
Merged

Auto-port 4.1: Fix UnsupportedOperationException in readTrailingHeaders#16437
normanmaurer merged 1 commit into4.1from
auto-port-pr-16412-to-4.1

Conversation

@netty-project-bot
Copy link
Copy Markdown
Contributor

Auto-port of #16412 to 4.1
Cherry-picked commit: 9a85f9f


Motivation:

When a chunked HTTP message contains a trailer field with a folded value (obs-fold continuation line starting with SP or HT), readTrailingHeaders threw UnsupportedOperationException. This happened because the folding logic called List.set() on the list returned by trailingHeaders().getAll(), which is an AbstractList implementation that does not override set().

Modifications:

Changed readTrailingHeaders in HttpObjectDecoder to accumulate folded continuation lines into the instance-level value field, mirroring the pattern already used by readHeaders. The previous header is now flushed via trailingHeaders().add() only once its complete value is assembled, eliminating the need to mutate the list returned by getAll(). Forbidden trailer fields (Content-Length, Transfer-Encoding, Trailer) are filtered at flush time, consistent with the previous behaviour.

Added tests to HttpRequestDecoderTest and HttpResponseDecoderTest covering:

  • A single trailer field
  • A folded trailer field with multiple SP and HT continuation lines, followed by a non-folded trailer to verify isolation between fields
  • Forbidden trailer fields interleaved with a valid one, with a forbidden field placed last to exercise the post-loop flush path

Result:

Chunked HTTP messages with folded trailer values are now decoded correctly instead of throwing UnsupportedOperationException.

Motivation:

When a chunked HTTP message contains a trailer field with a folded value
(obs-fold continuation line starting with SP or HT), readTrailingHeaders
threw UnsupportedOperationException. This happened because the folding
logic called List.set() on the list returned by
trailingHeaders().getAll(), which is an AbstractList implementation that
does not override set().

Modifications:

Changed readTrailingHeaders in HttpObjectDecoder to accumulate folded
continuation lines into the instance-level `value` field, mirroring the
pattern already used by readHeaders. The previous header is now flushed
via trailingHeaders().add() only once its complete value is assembled,
eliminating the need to mutate the list returned by getAll(). Forbidden
trailer fields (Content-Length, Transfer-Encoding, Trailer) are filtered
at flush time, consistent with the previous behaviour.

Added tests to HttpRequestDecoderTest and HttpResponseDecoderTest
covering:
- A single trailer field
- A folded trailer field with multiple SP and HT continuation lines,
followed by a non-folded trailer to verify isolation between fields
- Forbidden trailer fields interleaved with a valid one, with a
forbidden field placed last to exercise the post-loop flush path

Result:

Chunked HTTP messages with folded trailer values are now decoded
correctly instead of throwing UnsupportedOperationException.

(cherry picked from commit 9a85f9f)
@normanmaurer normanmaurer added this to the 4.1.132.Final milestone Mar 12, 2026
@normanmaurer normanmaurer merged commit 2c096a0 into 4.1 Mar 12, 2026
19 checks passed
@normanmaurer normanmaurer deleted the auto-port-pr-16412-to-4.1 branch March 12, 2026 14:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants