[issue37461] email.parser.Parser hang

Barry A. Warsaw added the comment: Thanks everyone for the fixes; I think this bug is now resolved. Closing. -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker __

[issue37461] email.parser.Parser hang

Change by Emmanuel Arias : -- nosy: +eamanu ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue37461] email.parser.Parser hang

Irit Katriel added the comment: This seems complete, can it be closed? -- nosy: +iritkatriel ___ Python tracker ___ ___ Python-bugs

[issue37461] email.parser.Parser hang

Larry Hastings added the comment: New changeset c28e4a5160d3283b12514c7c28ed6e0a2a52271a by larryhastings (Abhilash Raj) in branch '3.5': [3.5] bpo-37461: Fix infinite loop in parsing of specially crafted email headers (GH-14794) (#15446) https://github.com/python/cpython/commit/c28e4a5160d3

[issue37461] email.parser.Parser hang

Abhilash Raj added the comment: I manually created a backport PR for 3.5 and added Larry as a reviewer. https://github.com/python/cpython/pull/15446 -- ___ Python tracker ___

[issue37461] email.parser.Parser hang

Change by Abhilash Raj : -- pull_requests: +15138 pull_request: https://github.com/python/cpython/pull/15446 ___ Python tracker ___

[issue37461] email.parser.Parser hang

Ned Deily added the comment: xtreak, would you be willing to make the PR for 3.5? That will make it easier for Larry to decide whether to include it in a 3.5 security release. -- ___ Python tracker ___

[issue37461] email.parser.Parser hang

Ned Deily added the comment: New changeset f1f9c0c532089824791cfc18e6d6f29e1cd62596 by Ned Deily (GeeTransit) in branch '3.6': [3.6] bpo-37461: Fix typo (inifite -> infinite) (#15432) https://github.com/python/cpython/commit/f1f9c0c532089824791cfc18e6d6f29e1cd62596 -- _

[issue37461] email.parser.Parser hang

Change by George Zhang : -- pull_requests: +15137 pull_request: https://github.com/python/cpython/pull/15432 ___ Python tracker ___

[issue37461] email.parser.Parser hang

Ned Deily added the comment: New changeset 799e4e527019d9429fdef12d08a0c03b08a1fb59 by Ned Deily (GeeTransit) in branch '3.7': [3.7] bpo-37461: Fix typo (inifite -> infinite) (GH-15430) https://github.com/python/cpython/commit/799e4e527019d9429fdef12d08a0c03b08a1fb59 -- ___

[issue37461] email.parser.Parser hang

Change by George Zhang : -- pull_requests: +15136 pull_request: https://github.com/python/cpython/pull/15430 ___ Python tracker ___

[issue37461] email.parser.Parser hang

Ned Deily added the comment: New changeset 1789bbdd3e03023951a39933ef12dee0a03be616 by Ned Deily (Miss Islington (bot)) in branch '3.6': bpo-37461: Fix infinite loop in parsing of specially crafted email headers (GH-14794) (GH-14817) https://github.com/python/cpython/commit/1789bbdd3e0302395

[issue37461] email.parser.Parser hang

Karthikeyan Singaravelan added the comment: 3.5 also seems to be affected. git cherry pick works and the patch fixes the problem so I assume the backport would be straightforward. Since 3.5 is open for security fixes with 3.5.8 as next release I am adding Larry. $ git cherry-pick a4a994b Per

[issue37461] email.parser.Parser hang

miss-islington added the comment: New changeset 6816ca30af7705db691343100e696ea3d8f447d5 by Miss Islington (bot) in branch '3.8': bpo-37461: Fix infinite loop in parsing of specially crafted email headers (GH-14794) https://github.com/python/cpython/commit/6816ca30af7705db691343100e696ea3d8f

[issue37461] email.parser.Parser hang

miss-islington added the comment: New changeset 391511ccaaf0050970dfbe95bf2df1bcf6c33440 by Miss Islington (bot) in branch '3.7': bpo-37461: Fix infinite loop in parsing of specially crafted email headers (GH-14794) https://github.com/python/cpython/commit/391511ccaaf0050970dfbe95bf2df1bcf6c

[issue37461] email.parser.Parser hang

Change by miss-islington : -- pull_requests: +14612 pull_request: https://github.com/python/cpython/pull/14818 ___ Python tracker ___ __

[issue37461] email.parser.Parser hang

Change by miss-islington : -- pull_requests: +14611 pull_request: https://github.com/python/cpython/pull/14817 ___ Python tracker ___ __

[issue37461] email.parser.Parser hang

Barry A. Warsaw added the comment: New changeset a4a994bd3e619cbaff97610a1cee8ffa87c672f5 by Barry Warsaw (Abhilash Raj) in branch 'master': bpo-37461: Fix infinite loop in parsing of specially crafted email headers (GH-14794) https://github.com/python/cpython/commit/a4a994bd3e619cbaff97610a

[issue37461] email.parser.Parser hang

Change by miss-islington : -- pull_requests: +14610 pull_request: https://github.com/python/cpython/pull/14816 ___ Python tracker ___ __

[issue37461] email.parser.Parser hang

Guido Vranken added the comment: I used fuzzing to find this bug. After applying your patch, the infinite loop is gone and it cannot find any other bugs of this nature. -- ___ Python tracker ___

[issue37461] email.parser.Parser hang

Abhilash Raj added the comment: I have proposed a PR for this: https://github.com/python/cpython/pull/14794 Reviews are welcome. -- ___ Python tracker ___ ___

[issue37461] email.parser.Parser hang

Change by Abhilash Raj : -- pull_requests: +14588 pull_request: https://github.com/python/cpython/pull/14794 ___ Python tracker ___

[issue37461] email.parser.Parser hang

Change by STINNER Victor : Added file: https://bugs.python.org/file48484/reproducer2.py ___ Python tracker ___ ___ Python-bugs-list mailing

[issue37461] email.parser.Parser hang

STINNER Victor added the comment: >>> bytes([0x43, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x2d, 0x54, 0x79, 0x70, >>> 0x65, 0x3a, 0x78, 0x3b, 0x61, 0x72, 0x1b, 0x2a, 0x3d, 0x22, 0x73, 0x4f, >>> 0x27, 0x23, 0x61, 0xff, 0xff, 0x27, 0x5c, 0x22]) b'Content-Type:x;ar\x1b*="sO\'#a\xff\xff\'\\"' The f

[issue37461] email.parser.Parser hang

Change by STINNER Victor : -- type: crash -> security ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https:/

[issue37461] email.parser.Parser hang

Change by Nam Nguyen : -- nosy: +Nam.Nguyen ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue37461] email.parser.Parser hang

Change by Alex Gaynor : -- nosy: +alex ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.or

[issue37461] email.parser.Parser hang

Marcin Niemira added the comment: I'm terribly sorry, but I feel I won't be able to fix this issue. Sorry for fuss. Closing my PR, because it's broken. -- ___ Python tracker

[issue37461] email.parser.Parser hang

Change by Marcin Niemira : -- keywords: +patch pull_requests: +14369 stage: -> patch review pull_request: https://github.com/python/cpython/pull/14551 ___ Python tracker ___ _

[issue37461] email.parser.Parser hang

Karthikeyan Singaravelan added the comment: Since the parser could take user input this looks like a security issue to me along with high CPU usage. Feel free to remove the tag if it's not a security issue. Thanks. -- keywords: +security_issue nosy: +xtreak versions: +Python 3.6, Pyt

[issue37461] email.parser.Parser hang

Marcin Niemira added the comment: Sounds like there is an infinite loop here: ``` Pdb) > /usr/lib/python3.7/email/_header_value_parser.py(2370)get_parameter() -> v.append(token) (Pdb) > /usr/lib/python3.7/email/_header_value_parser.py(2365)get_parameter() -> while value: ``` the ```v.appen

[issue37461] email.parser.Parser hang

Change by Karthikeyan Singaravelan : -- nosy: +maxking ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https:

[issue37461] email.parser.Parser hang

New submission from Guido Vranken : The following will hang, and consume a large amount of memory: from email.parser import BytesParser, Parser from email.policy import default payload = "".join(chr(c) for c in [0x43, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x2d, 0x54, 0x79, 0x70, 0x65, 0x3a, 0x78