ChunkedOutputStream missing last CRLF (original) (raw)

Zhong Yu zhong.j.yu at gmail.com
Thu Feb 28 07:15:06 PST 2013

HTTP chunked body should be ended with

0 CRLF CRLF

See http://tools.ietf.org/html/rfc2616#section-3.6.1

However sun.net.www.http.ChunkedOutputStream ends only with

0 CRLF

missing the last CRLF.

This is a serious framing error. If an HTTP connection is reused, the next message head will be considered trailer for the chunked body and ignored, and the next message body will be parsed as head. If the HTTP connection is not reused, the other end may be waiting indefinitely for the chunked body to end.

Test code:

public static void main(String[] args) throws IOException
{
    ByteArrayOutputStream out = new ByteArrayOutputStream();
    ChunkedOutputStream chunked = new ChunkedOutputStream(new

PrintStream(out)); chunked.close(); out.close(); for(byte b : out.toByteArray()) System.out.println(b); }

produces "0 CR LF", while it should produce "0 CR LF CR LF".

Zhong Yu

More information about the net-dev mailing list