.NET8 CVE-2024-30046漏洞简析

//dotnet/aspnetcore/blob/main/src/Servers/Kestrel/Core/src/Internal/Http2/Http2OutputProducer.cs#L566
public void Stop()
{
    lock (_dataWriterLock)
    {
        _waitingForWindowUpdates = false;

        if (_completeScheduled && _completedResponse)
        {
                // We can overschedule as long as we haven't yet completed the response. This is important because
                // we may need to abort the stream if it's waiting for a window update.
                return;
        }
        _completeScheduled = true;
         EnqueueStateUpdate(State.Aborted);
        Schedule();
   }
}

private void EnqueueStateUpdate(State state)
{
    lock (_dataWriterLock)
    {
      _unobservedState |= state;
    }
}