| commit | a4a994bd3e619cbaff97610a1cee8ffa87c672f5 | [log] [tgz] |
|---|---|---|
| author | Abhilash Raj <maxking@users.noreply.github.com> | Wed Jul 17 09:44:27 2019 -0700 |
| committer | Barry Warsaw <barry@python.org> | Wed Jul 17 09:44:27 2019 -0700 |
| tree | 6aee3d24c4a984481adf2921c31108635b0857ce | |
| parent | 82494aa6d947c4a320c09c58fe0f100cdcf7af0b [diff] |
bpo-37461: Fix infinite loop in parsing of specially crafted email headers (GH-14794) * bpo-37461: Fix infinite loop in parsing of specially crafted email headers. Some crafted email header would cause the get_parameter method to run in an infinite loop causing a DoS attack surface when parsing those headers. This patch fixes that by making sure the DQUOTE character is handled to prevent going into an infinite loop.