[issue15955] gzip, bz2, lzma: add option to limit output size

Martin Panter report at bugs.python.org
Thu Jan 8 15:38:37 CET 2015


Martin Panter added the comment:

It turns out that GzipFile.read(<size>) etc is also susceptible to decompression bombing. Here is a patch to test and fix that, making use of the existing “max_length” parameter in the “zlib” module.

----------
Added file: http://bugs.python.org/file37644/gzip-bomb.patch

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue15955>
_______________________________________


More information about the Python-bugs-list mailing list