File python-3.2.1-CVE-2012-0845-xmlrpc-DoS.patch of Package python3.370

Overview Repositories Revisions Requests Users Attributes Meta

File python-3.2.1-CVE-2012-0845-xmlrpc-DoS.patch of Package python3.370

# HG changeset patch
# User Charles-François Natali <neologix@free.fr>
# Date 1329573221 -3600
# Node ID cd67740ce653777da2bbeec8e92989406f9678f6
# Parent  88522997b0217788d0863ef5cc8aff08de5a4c1b# Parent  4dd5a94fd3e376448e67be6be7007dbc926299e3
Issue #14001: CVE-2012-0845: xmlrpc: Fix an endless loop in SimpleXMLRPCServer
upon malformed POST request.

Index: Python-3.1.3/Lib/xmlrpc/server.py
===================================================================
--- Python-3.1.3.orig/Lib/xmlrpc/server.py	2010-10-31 19:15:00.000000000 +0100
+++ Python-3.1.3/Lib/xmlrpc/server.py	2012-03-30 19:51:48.000000000 +0200
@@ -449,7 +449,10 @@
             L = []
             while size_remaining:
                 chunk_size = min(size_remaining, max_chunk_size)
-                L.append(self.rfile.read(chunk_size))
+                chunk = self.rfile.read(chunk_size)
+                if not chunk:
+                    break
+                L.append(chunk)
                 size_remaining -= len(L[-1])
             data = b''.join(L)

Places

File python-3.2.1-CVE-2012-0845-xmlrpc-DoS.patch of Package python3.370

Places