diff options
| author | Abhilash Raj <maxking@users.noreply.github.com> | 2019-07-17 16:44:27 (GMT) |
|---|---|---|
| committer | Barry Warsaw <barry@python.org> | 2019-07-17 16:44:27 (GMT) |
| commit | a4a994bd3e619cbaff97610a1cee8ffa87c672f5 (patch) | |
| tree | 6aee3d24c4a984481adf2921c31108635b0857ce /Modules/sha1module.c | |
| parent | 82494aa6d947c4a320c09c58fe0f100cdcf7af0b (diff) | |
| download | cpython-a4a994bd3e619cbaff97610a1cee8ffa87c672f5.zip cpython-a4a994bd3e619cbaff97610a1cee8ffa87c672f5.tar.gz cpython-a4a994bd3e619cbaff97610a1cee8ffa87c672f5.tar.bz2 | |
bpo-37461: Fix infinite loop in parsing of specially crafted email headers (GH-14794)
* bpo-37461: Fix infinite loop in parsing of specially crafted email headers.
Some crafted email header would cause the get_parameter method to run in an
infinite loop causing a DoS attack surface when parsing those headers. This
patch fixes that by making sure the DQUOTE character is handled to prevent
going into an infinite loop.
Diffstat (limited to 'Modules/sha1module.c')
0 files changed, 0 insertions, 0 deletions