Skip to content

[llhttp] Update to 9.4.3 - #55018

Open
Yizhou Tong (tsurumi-yizhou) wants to merge 1 commit into
microsoft:masterfrom
tsurumi-yizhou:llhttp-9.4.3
Open

Yizhou Tong (tsurumi-yizhou) wants to merge 1 commit into
microsoft:masterfrom
tsurumi-yizhou:llhttp-9.4.3

Conversation

@tsurumi-yizhou

Copy link
Copy Markdown
Contributor

Updates llhttp to 9.4.3.

Releases since the current 9.3.1:

The 9.4.2 and 9.4.3 changes are request-smuggling / response-splitting
hardening: 9.3.1 accepts messages that these releases reject. HTTP libraries
that parse untrusted traffic should not stay on 9.3.1.

The existing static-only portfile is unchanged apart from the SHA512;
LLHTTP_BUILD_SHARED_LIBS / LLHTTP_BUILD_STATIC_LIBS are still the options
9.4.3 exposes, and vcpkg x-add-version llhttp --overwrite-version regenerated
the version record.

Testing: vcpkg install llhttp:x64-linux from this branch succeeds and
installs libllhttp.a with the llhttp::llhttp_static CMake target; a C++23
consumer (httpant) builds and passes its HTTP/1.1 conformance and framing
tests against it.

Copilot AI balanced review requested due to automatic review settings November 11, 2026 21:01

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota. Try requesting a review at a lower effort level.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants