[issue34866] CGI DOS vulnerability via long post list

2018-10-30 Thread Matthew Belisle
Matthew Belisle added the comment: That makes sense Victor, I agree. Thanks for merging those PRs. -- ___ Python tracker <https://bugs.python.org/issue34

[issue35116] Doc/library entries for cgi.FieldStorage max_num_fields

2018-10-30 Thread Matthew Belisle
Change by Matthew Belisle : -- pull_requests: +9562 ___ Python tracker <https://bugs.python.org/issue35116> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue35116] Doc/library entries for cgi.FieldStorage max_num_fields

2018-10-30 Thread Matthew Belisle
Change by Matthew Belisle : -- pull_requests: +9561 ___ Python tracker <https://bugs.python.org/issue35116> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue35116] Doc/library entries for cgi.FieldStorage max_num_fields

2018-10-30 Thread Matthew Belisle
Change by Matthew Belisle : -- keywords: +patch pull_requests: +9560 stage: -> patch review ___ Python tracker <https://bugs.python.org/issue35116> ___ ___ Py

[issue35116] Doc/library entries for cgi.FieldStorage max_num_fields

2018-10-30 Thread Matthew Belisle
New submission from Matthew Belisle : vstinner pointed out that cgi.FieldStorage max_num_fields needs documentation added to Doc/library. https://bugs.python.org/issue34866#msg328401 -- assignee: docs@python components: Documentation messages: 328937 nosy: Matthew Belisle, docs

[issue35028] Off by one error in cgi.FieldStorage(max_num_fields)

2018-10-19 Thread Matthew Belisle
New submission from Matthew Belisle : The cgi.FieldStorage class added in https://github.com/python/cpython/pull/9660 has an off by one error in the logic for recursively nested objects. The problem is that sub_max_num_fields should be initialized outside of the while loop, not inside of it

[issue35028] Off by one error in cgi.FieldStorage(max_num_fields)

2018-10-19 Thread Matthew Belisle
Change by Matthew Belisle : -- keywords: +patch pull_requests: +9317 stage: -> patch review ___ Python tracker <https://bugs.python.org/issue35028> ___ ___ Py

[issue34866] CGI DOS vulnerability via long post list

2018-10-19 Thread Matthew Belisle
Change by Matthew Belisle : -- pull_requests: +9314 ___ Python tracker <https://bugs.python.org/issue34866> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue34866] CGI DOS vulnerability via long post list

2018-10-10 Thread Matthew Belisle
Matthew Belisle added the comment: Sorry, looks like I forgot to attach example.py. Attaching now. -- Added file: https://bugs.python.org/file47861/example.py ___ Python tracker <https://bugs.python.org/issue34

[issue34866] CGI DOS vulnerability via long post list

2018-10-01 Thread Matthew Belisle
New submission from Matthew Belisle : Copied from email to secur...@python.org: I have been doing memory profiling on a few python web frameworks and I noticed this issue in the cgi.FieldStorage class. $ python example.py Memory used: 523935744 bytes The problem is there is no easy way to