[issue1966] infinite loop in httplib

2008-02-12 Thread Martin v. Löwis 

Martin v. Löwis added the comment:

Thanks for the patch. Committed as r60747 and r60748.

--
resolution:  - accepted
status: open - closed

__
Tracker [EMAIL PROTECTED]
http://bugs.python.org/issue1966
__
___
Python-bugs-list mailing list 
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue1966] infinite loop in httplib

2008-02-07 Thread Georgij Kondratjev 

Changes by Georgij Kondratjev:


--
nosy: +orivej

__
Tracker [EMAIL PROTECTED]
http://bugs.python.org/issue1966
__
___
Python-bugs-list mailing list 
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue1966] infinite loop in httplib

2008-01-30 Thread Christian Heimes 

Christian Heimes added the comment:

I'm not sure if the patch can get into 2.3 and 2.4. It's up to Martin to
decide.

--
assignee:  - loewis
keywords: +easy, patch
nosy: +loewis, tiran
priority:  - high

__
Tracker [EMAIL PROTECTED]
http://bugs.python.org/issue1966
__
___
Python-bugs-list mailing list 
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue1966] infinite loop in httplib

2008-01-30 Thread Jesús Cea Avión 

Changes by Jesús Cea Avión:


--
nosy: +jcea

__
Tracker [EMAIL PROTECTED]
http://bugs.python.org/issue1966
__
___
Python-bugs-list mailing list 
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue1966] infinite loop in httplib

2008-01-30 Thread Mike Klaas 

Mike Klaas added the comment:

I wouldn't advocate that it go in to 2.3/2.4.  The only security issue is 
a possible DoS, but I think that is unlikely.  There is already an attack 
vector for python code using (timeout-less) httplib by simply returning 
the response very slowly (1byte/sec).

__
Tracker [EMAIL PROTECTED]
http://bugs.python.org/issue1966
__
___
Python-bugs-list mailing list 
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue1966] infinite loop in httplib

2008-01-30 Thread Martin v. Löwis 

Changes by Martin v. Löwis:


--
versions:  -Python 2.3, Python 2.4

__
Tracker [EMAIL PROTECTED]
http://bugs.python.org/issue1966
__
___
Python-bugs-list mailing list 
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue1966] infinite loop in httplib

2008-01-29 Thread Mike Klaas 

New submission from Mike Klaas:

There are a small number of sites that do not send the trailing \r\n when 
using chunked transfer encoding (say 1 in 500,000).  This unfortunately, 
causes httplib to go into an infinite loop.

Fixed by checking for EOF (3 line patch)

--
components: Library (Lib)
files: httplib_chunked.patch
messages: 61824
nosy: klaas
severity: major
status: open
title: infinite loop in httplib
type: behavior
versions: Python 2.3, Python 2.4, Python 2.5, Python 2.6, Python 3.0
Added file: http://bugs.python.org/file9318/httplib_chunked.patch

__
Tracker [EMAIL PROTECTED]
http://bugs.python.org/issue1966
__
___
Python-bugs-list mailing list 
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com