NettyRpc

NettyRpc copied to clipboard

LineFieldBasedFrameDecoder应该已经保证解码到一个完整的帧了，是不是在RpcDecoder中就不需要再进行帧是否完整的判断了？

JustDoIt0910

支持指定IP+port调用吗

1

client 支持指定IP+port调用吗

oawang

handlerMap封装bean那里有bug

2

原代码： String interfaceName = serviceBean.getClass().getAnnotation(RpcService.class).value().getName(); 如果这个serviceBean本身是个cglibBean，你这个方法会获取不到RpcService的annotation信息的，使用Spring的AnnotationUtils可以解决

moluqianli

Bumps [jackson-databind](https://github.com/FasterXML/jackson) from 2.12.1 to 2.12.6.1. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

# Describe the Vulnerability A deserialization vulnerability in NettyRpc v1.2 allows attackers to execute arbitrary commands via sending a crafted RPC request. # Environment - NettyRpc: v1.2 - JVM version:...

MountainCui25

remove old那块代码我没看懂，那里不是就不执行吗？而且你要remove old的话，你初始化的linkedHashMap里，你override的removeEldestEntry方法不就已经实现了吗？

notminusone

com.netty.rpc.server.registry.ServiceRegistry#registerService，这段里面在stateChanged时，就会调用一次registerService，在服务注册内继续添加zk状态监听，Listener会越来越多，提到registerService之后再添加监听即可  

naquken

### Problem Statement NettyRPC supports the utilization of the `HessianSerializer` and `Hessian1Serializer` protocol within its RPC communication framework. We discovered that attackers can achieve Remote Code Execution(RCE) attacks by sending...

LQxdu

Bumps [org.springframework:spring-context](https://github.com/spring-projects/spring-framework) from 5.2.22.RELEASE to 6.1.14. Release notes Sourced from org.springframework:spring-context's releases. v6.1.14 :star: New Features Use Locale.ROOT for locale neutral, case insensitive comparisons #33708 Improve checks for relative paths...

dependabot[bot]