Message 191963 - Python tracker

➜

This issue tracker has been migrated to GitHub , and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

In-reply-to
Author	jwilk
Recipients	jwilk
Date	2013年06月27日.22:01:26
SpamBayes Score	-1.0
Marked as misclassified	Yes
Message-id	<1372370486.3.0.302841036863.issue18317@psf.upfronthosting.co.za>

Content
It is possible to craft a MO file with Plural-Forms taking arbitrary amounts of CPU and memory to evaluate. A test case is attached. I realize that opening unstrusted MO files is a rather unusual use case, but the module already contains some code to protect againt malicious Plural-Forms, so I thought you might want to fix this problem as well.

Content

It is possible to craft a MO file with Plural-Forms taking arbitrary amounts of CPU and memory to evaluate. A test case is attached.
I realize that opening unstrusted MO files is a rather unusual use case, but the module already contains some code to protect againt malicious Plural-Forms, so I thought you might want to fix this problem as well.

History
Date	User	Action	Args
2013年06月27日 22:01:26	jwilk	set	recipients: + jwilk
2013年06月27日 22:01:26	jwilk	set	messageid: <1372370486.3.0.302841036863.issue18317@psf.upfronthosting.co.za>
2013年06月27日 22:01:26	jwilk	link	issue18317 messages
2013年06月27日 22:01:26	jwilk	create

homepage