id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc	launchpad_bug
3908	Detect invalid HTTP storage server responses early, close request	itamarst		"When downloading shares, if the Content-Length/Content-Range of a response doesn't match requested body length (too short means we were wrong about what server has in terms of length, or server bug, too long means server bug), we should probably just give up early.

This depends on #3907; currently we knowingly send non-matching lengths, so that needs to be fixed first.

It also depends on https://github.com/twisted/treq/issues/347 to make this possible at all. This has been fixed, but requires a 2023 release of Treq.

Implementation: when deliverBody() happens the passed-in protocol gets access to the transport, allowing us to close the connection."	enhancement	new	normal	HTTP Storage Protocol v2	unknown	n/a