]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-42103: Improve validation of Plist files. (GH-22882)
authorSerhiy Storchaka <storchaka@gmail.com>
Mon, 2 Nov 2020 21:01:40 +0000 (23:01 +0200)
committerGitHub <noreply@github.com>
Mon, 2 Nov 2020 21:01:40 +0000 (23:01 +0200)
commit34637a0ce21e7261b952fbd9d006474cc29b681f
tree39914654a8ddafa8a95822ae5d180b154ef1105d
parent6fdfcec5b11f44f27aae3d53ddeb004150ae1f61
bpo-42103: Improve validation of Plist files. (GH-22882)

* Prevent some possible DoS attacks via providing invalid Plist files
  with extremely large number of objects or collection sizes.
* Raise InvalidFileException for too large bytes and string size instead of returning garbage.
* Raise InvalidFileException instead of ValueError for specific invalid datetime (NaN).
* Raise InvalidFileException instead of TypeError for non-hashable dict keys.
* Add more tests for invalid Plist files.
Lib/plistlib.py
Lib/test/test_plistlib.py
Misc/NEWS.d/next/Library/2020-10-23-19-20-14.bpo-42103.C5obK2.rst [new file with mode: 0644]
Misc/NEWS.d/next/Security/2020-10-23-19-19-30.bpo-42103.cILT66.rst [new file with mode: 0644]