homepage

➜

This issue tracker has been migrated to GitHub , and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

In-reply-to
Author	socketpair
Recipients	socketpair
Date	2011年02月20日.16:40:01
SpamBayes Score	0.012760989
Marked as misclassified	No
Message-id	<1298220002.68.0.352394054223.issue11259@psf.upfronthosting.co.za>

Content
asynchat does not check if terminator is negative integer. so constructions like self.ac_in_buffer[:n] will lead to misbehaviour. When that integer goes from net, attack can be crafted. For example, on Content-Length field.

Content

asynchat does not check if terminator is negative integer. so constructions like self.ac_in_buffer[:n] will lead to misbehaviour.
When that integer goes from net, attack can be crafted. For example, on Content-Length field.

History
Date	User	Action	Args
2011年02月20日 16:40:02	socketpair	set	recipients: + socketpair
2011年02月20日 16:40:02	socketpair	set	messageid: <1298220002.68.0.352394054223.issue11259@psf.upfronthosting.co.za>
2011年02月20日 16:40:01	socketpair	link	issue11259 messages
2011年02月20日 16:40:01	socketpair	create