![]() ![]() Simplified form of the BNF from the RFC is made to conform with the RFC BNF ![]() The CFWS is implied by the RFC but not made explicit in the BNF. The following loop of Lib/email/_header_value_parser.py does never stop: I'm terribly sorry, but I feel I won't be able to fix this issue. Feel free to remove the tag if it's not a security issue. Since the parser could take user input this looks like a security issue to me along with high CPU usage. ![]() ![]() The ```v.append(token)``` is just growing with ```ValueTerminal(''), ValueTerminal(''), ValueTerminal('').```Īuthor: Karthikeyan Singaravelan (xtreak) * > /usr/lib/python3.7/email/_header_value_parser.py(2365)get_parameter() > /usr/lib/python3.7/email/_header_value_parser.py(2370)get_parameter() Sounds like there is an infinite loop here: The following will hang, and consume a large amount of memory:įrom email.parser import BytesParser, Parser Guido, Marcin Niemira, Nam.Nguyen, alex, barry, eamanu, iritkatriel, larry, maxking, miss-islington, ned.deily, r.david.murray, vstinner, xtreakĬreated on 03:21 by Guido, last changed 21:45 by barry. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |