]> granicus.if.org Git - python/commit
#16042: CVE-2013-1752: Limit amount of data read by limiting the call to readline().
authorAndrew Kuchling <amk@amk.ca>
Sun, 15 Sep 2013 17:11:47 +0000 (13:11 -0400)
committerAndrew Kuchling <amk@amk.ca>
Sun, 15 Sep 2013 17:11:47 +0000 (13:11 -0400)
commit503baf9ecd2cc5fb0bb85cec99c300862c02de85
tree8817cfd798230c1c1ad0aa5d8c5a4ba2e6bc7f32
parented9884b2d0d5f1d4b1a8b252c4cd702095e0fc23
#16042: CVE-2013-1752: Limit amount of data read by limiting the call to readline().

The SSLFakeFile.readline() method needs to support limiting readline() as
well.  It's not a full emulation of readline()'s signature, but this class
is only used by smtplib's code, so it doesn't have to be.

Modified version of original patch by Christian Heimes.
Lib/smtplib.py
Lib/test/test_smtplib.py
Misc/NEWS