]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-44022: Fix http client infinite line reading (DoS) after a HTTP 100 Continue...
authorGen Xu <xgbarry@gmail.com>
Wed, 5 May 2021 22:42:41 +0000 (15:42 -0700)
committerGitHub <noreply@github.com>
Wed, 5 May 2021 22:42:41 +0000 (15:42 -0700)
commit47895e31b6f626bc6ce47d175fe9d43c1098909d
tree2240921e2bb4cdbfd9b59ad04984fd67e25598c3
parentda5c808fb50d34bc2e180d9481706072f33025da
bpo-44022: Fix http client infinite line reading (DoS) after a HTTP 100 Continue (GH-25916)

Fixes http.client potential denial of service where it could get stuck reading lines from a malicious server after a 100 Continue response.

Co-authored-by: Gregory P. Smith <greg@krypto.org>
Lib/http/client.py
Lib/test/test_httplib.py
Misc/NEWS.d/next/Security/2021-05-05-17-37-04.bpo-44022.bS3XJ9.rst [new file with mode: 0644]