[issue15955] gzip, bz2, lzma: add option to limit output size
Martin Panter
report at bugs.python.org
Thu Jan 8 15:38:37 CET 2015
Martin Panter added the comment:
It turns out that GzipFile.read(<size>) etc is also susceptible to decompression bombing. Here is a patch to test and fix that, making use of the existing “max_length” parameter in the “zlib” module.
----------
Added file: http://bugs.python.org/file37644/gzip-bomb.patch
_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue15955>
_______________________________________
More information about the Python-bugs-list
mailing list