diff options
author | Georg Brandl <georg@python.org> | 2014-09-30 12:45:39 (GMT) |
---|---|---|
committer | Georg Brandl <georg@python.org> | 2014-09-30 12:45:39 (GMT) |
commit | eaca8616ab0e219ebb5cf37d495f4bf336ec0f5e (patch) | |
tree | b852d80486edb58b2fe1f67eba92547a319e391d /Lib/poplib.py | |
parent | 210ee47e3340d8e689d8cce584e7c918d368f16b (diff) | |
download | cpython-eaca8616ab0e219ebb5cf37d495f4bf336ec0f5e.zip cpython-eaca8616ab0e219ebb5cf37d495f4bf336ec0f5e.tar.gz cpython-eaca8616ab0e219ebb5cf37d495f4bf336ec0f5e.tar.bz2 |
Issue #16041: CVE-2013-1752: poplib: Limit maximum line lengths to 2048 to
prevent readline() calls from consuming too much memory. Patch by Jyrki
Pulliainen.
Diffstat (limited to 'Lib/poplib.py')
-rw-r--r-- | Lib/poplib.py | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/Lib/poplib.py b/Lib/poplib.py index 84ea88d..13e0f71 100644 --- a/Lib/poplib.py +++ b/Lib/poplib.py @@ -32,6 +32,12 @@ CR = b'\r' LF = b'\n' CRLF = CR+LF +# maximal line length when calling readline(). This is to prevent +# reading arbitrary lenght lines. RFC 1939 limits POP3 line length to +# 512 characters, including CRLF. We have selected 2048 just to be on +# the safe side. +_MAXLINE = 2048 + class POP3: @@ -107,7 +113,10 @@ class POP3: # Raise error_proto('-ERR EOF') if the connection is closed. def _getline(self): - line = self.file.readline() + line = self.file.readline(_MAXLINE + 1) + if len(line) > _MAXLINE: + raise error_proto('line too long') + if self._debugging > 1: print('*get*', repr(line)) if not line: raise error_proto('-ERR EOF') octets = len(line) |