granicus.if.org Git - python/commit

]> granicus.if.org Git - python/commit

author	Antoine Pitrou <solipsis@pitrou.net>
	Fri, 10 Apr 2015 22:31:01 +0000 (00:31 +0200)
committer	Antoine Pitrou <solipsis@pitrou.net>
	Fri, 10 Apr 2015 22:31:01 +0000 (00:31 +0200)
commit	2dbc6e6bce0a29757acddd8000d55f7c844295a2
tree	f1510e3a93b2527308dd6400a8b0544607e072db	tree \| snapshot
parent	2ce11d296cee8d71d2bf2451c7dba4ffa119d9d3	commit \| diff

Issue #23529: Limit the size of decompressed data when reading from
GzipFile, BZ2File or LZMAFile. This defeats denial of service attacks
using compressed bombs (i.e. compressed payloads which decompress to a huge
size).

Patch by Martin Panter and Nikolaus Rath.

Doc/library/bz2.rst		diff \| blob \| history
Doc/library/gzip.rst		diff \| blob \| history
Doc/library/lzma.rst		diff \| blob \| history
Lib/_compression.py	[new file with mode: 0644]	blob
Lib/bz2.py		diff \| blob \| history
Lib/gzip.py		diff \| blob \| history
Lib/lzma.py		diff \| blob \| history
Lib/test/test_bz2.py		diff \| blob \| history
Lib/test/test_gzip.py		diff \| blob \| history
Lib/test/test_lzma.py		diff \| blob \| history
Misc/NEWS		diff \| blob \| history

Unnamed repository; edit this file 'description' to name the repository.

RSS Atom