[issue42103] [security] DoS (MemError via CPU and RAM exhaustion) when processing malformed Apple Property List files in binary format

Serhiy Storchaka report at bugs.python.org
Thu Oct 22 05:47:54 EDT 2020


Serhiy Storchaka <storchaka+cpython at gmail.com> added the comment:

PR 22882 fixes problem in _read_ints(), adds validation for string size, and adds many tests for mailformed binary Plists.

There may be problems with recursive collections. I'll try to solve them too.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue42103>
_______________________________________


More information about the Python-bugs-list mailing list