_ChunkedTransferDecoder may slow down quadratically and exhaust memory
| Newsgroups | gmane.comp.python.twisted.bugs |
|---|---|
| Message-ID | <[email protected]> |
New submission from ivank <[email protected]>: twisted.web.http._ChunkedTransferDecoder trusts the input too much, allowing malicious or corrupted input to quadratically slow down the parser and exhaust memory. This can happen when the parser reads the chunk length, or the trailer. ---------- Type : defect Component: core Keywords : security Priority : high Nosy : exarkun, jknight, ivank ---------- http://twistedmatrix.com/trac/ticket/3795