diff options
| author | Miss Skeleton (bot) <31488909+miss-islington@users.noreply.github.com> | 2020-11-02 21:34:46 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-11-02 21:34:46 (GMT) |
| commit | e277cb76989958fdbc092bf0b2cb55c43e86610a (patch) | |
| tree | 8d698547371d7b995e7200ff469fb8411891fd2c /Python/strdup.c | |
| parent | 723e21a8e79815ae77474d1f21b9847b9c9bdbeb (diff) | |
| download | cpython-e277cb76989958fdbc092bf0b2cb55c43e86610a.zip cpython-e277cb76989958fdbc092bf0b2cb55c43e86610a.tar.gz cpython-e277cb76989958fdbc092bf0b2cb55c43e86610a.tar.bz2 | |
bpo-42103: Improve validation of Plist files. (GH-22882)
* Prevent some possible DoS attacks via providing invalid Plist files
with extremely large number of objects or collection sizes.
* Raise InvalidFileException for too large bytes and string size instead of returning garbage.
* Raise InvalidFileException instead of ValueError for specific invalid datetime (NaN).
* Raise InvalidFileException instead of TypeError for non-hashable dict keys.
* Add more tests for invalid Plist files.
(cherry picked from commit 34637a0ce21e7261b952fbd9d006474cc29b681f)
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
Diffstat (limited to 'Python/strdup.c')
0 files changed, 0 insertions, 0 deletions