diff options
| author | Ashwin Ramaswami <aramaswamis@gmail.com> | 2019-08-31 15:25:35 (GMT) |
|---|---|---|
| committer | Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com> | 2019-08-31 15:25:35 (GMT) |
| commit | c5b242f87f31286ad38991bc3868cf4cfbf2b681 (patch) | |
| tree | 80f7659bec45074eb85998dfc041c0e1176b5dcc /Misc | |
| parent | daa82d019c52e95c3c57275307918078c1c0ac81 (diff) | |
| download | cpython-c5b242f87f31286ad38991bc3868cf4cfbf2b681.zip cpython-c5b242f87f31286ad38991bc3868cf4cfbf2b681.tar.gz cpython-c5b242f87f31286ad38991bc3868cf4cfbf2b681.tar.bz2 | |
bpo-37764: Fix infinite loop when parsing unstructured email headers. (GH-15239)
Fixes a case in which email._header_value_parser.get_unstructured hangs the system for some invalid headers. This covers the cases in which the header contains either:
- a case without trailing whitespace
- an invalid encoded word
https://bugs.python.org/issue37764
This fix should also be backported to 3.7 and 3.8
https://bugs.python.org/issue37764
Diffstat (limited to 'Misc')
| -rw-r--r-- | Misc/ACKS | 1 | ||||
| -rw-r--r-- | Misc/NEWS.d/next/Security/2019-08-27-01-13-05.bpo-37764.qv67PQ.rst | 1 |
2 files changed, 2 insertions, 0 deletions
@@ -1336,6 +1336,7 @@ Burton Radons Abhilash Raj Shorya Raj Dhushyanth Ramasamy +Ashwin Ramaswami Jeff Ramnani Bayard Randel Varpu Rantala diff --git a/Misc/NEWS.d/next/Security/2019-08-27-01-13-05.bpo-37764.qv67PQ.rst b/Misc/NEWS.d/next/Security/2019-08-27-01-13-05.bpo-37764.qv67PQ.rst new file mode 100644 index 0000000..27fa8e1 --- /dev/null +++ b/Misc/NEWS.d/next/Security/2019-08-27-01-13-05.bpo-37764.qv67PQ.rst @@ -0,0 +1 @@ +Fixes email._header_value_parser.get_unstructured going into an infinite loop for a specific case in which the email header does not have trailing whitespace, and the case in which it contains an invalid encoded word. Patch by Ashwin Ramaswami.
\ No newline at end of file |