Repository navigation
test(http3): verify request encoding with independent QPACK peers - #38
Merged
Merged
Conversation
hatoo
enabled auto-merge (squash)
October 21, 2026 09:54
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
An incorrect QPACK name or length can pass tests that pair the request encoder with its own decoding logic. Add an independent pylsqpack oracle that checks all 52 static names, ordered duplicates, empty/UTF-8 values, literal fallback, length boundaries, large fields, and zero dynamic-table state across 437 request blocks.
Seventeen live aioquic cases verify exact headers, every request-body byte, FIN, and bilateral response counts through small flow-control windows. A new h3/quinn integration test checks repeated standard headers and a 70 KB POST through loss, duplication, and reordering. The Python oracle runs in required CI with pinned decoder versions.
Validation: 513 unit tests and 63 integration tests pass in both debug and release; strict all-target Clippy and formatting pass. The independent oracle completes 544 exact responses and validates 2,240,128 request-body bytes. A deliberately corrupted literal name is rejected; the same oracle also rejects an incorrect static index in a separate experimental encoder.
This PR changes tests, an encoder probe, documentation, and CI. Production source, dependencies, and Cargo.lock are unchanged. It makes no performance claim.