Staging
v0.8.1
v0.8.1
Revision c28e4a5160d3283b12514c7c28ed6e0a2a52271a authored by Abhilash Raj on 07 September 2019, 07:08:53 UTC, committed by larryhastings on 07 September 2019, 07:08:53 UTC
[3.5] bpo-37461: Fix infinite loop in parsing of specially crafted email headers (GH-14794) (#15446)
* [3.5] bpo-37461: Fix infinite loop in parsing of specially crafted email headers (GH-14794) Some crafted email header would cause the get_parameter method to run in an infinite loop causing a DoS attack surface when parsing those headers. This patch fixes that by making sure the DQUOTE character is handled to prevent going into an infinite loop. (cherry picked from commit a4a994bd3e619cbaff97610a1cee8ffa87c672f5) Co-authored-by: Abhilash Raj <maxking@users.noreply.github.com> Co-Authored-By: Ashwin Ramaswami <aramaswamis@gmail.com>
1 parent 095373c
| File | Mode | Size |
|---|---|---|
| .github | ||
| Doc | ||
| Grammar | ||
| Include | ||
| Lib | ||
| Mac | ||
| Misc | ||
| Modules | ||
| Objects | ||
| PC | ||
| PCbuild | ||
| Parser | ||
| Programs | ||
| Python | ||
| Tools | ||
| .bzrignore | -rw-r--r-- | 582 bytes |
| .gitattributes | -rw-r--r-- | 798 bytes |
| .gitignore | -rw-r--r-- | 1.3 KB |
| .hgeol | -rw-r--r-- | 1.0 KB |
| .hgignore | -rw-r--r-- | 1.3 KB |
| .hgtags | -rw-r--r-- | 8.2 KB |
| .travis.yml | -rw-r--r-- | 4.4 KB |
| LICENSE | -rw-r--r-- | 12.5 KB |
| Makefile.pre.in | -rw-r--r-- | 57.5 KB |
| README | -rw-r--r-- | 8.5 KB |
| aclocal.m4 | -rw-r--r-- | 10.7 KB |
| config.guess | -rwxr-xr-x | 43.2 KB |
| config.sub | -rwxr-xr-x | 35.7 KB |
| configure | -rwxr-xr-x | 468.0 KB |
| configure.ac | -rw-r--r-- | 154.3 KB |
| install-sh | -rwxr-xr-x | 7.0 KB |
| pyconfig.h.in | -rw-r--r-- | 40.9 KB |
| setup.py | -rw-r--r-- | 97.8 KB |
Computing file changes ...
