Mirror
/
cpython
mirror of https://github.com/python/cpython
4
1
Fork 0
Code Issues Releases Wiki Activity

- Fix DoS via XML document with malformed UTF-8 sequences (CVE_2009_3560).

This commit is contained in:
Matthias Klose 2010-01-21 17:41:47 +00:00
parent 8cd94b4306
commit 166f80860e
2 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
Misc/NEWS
View File

@ -4,6 +4,17 @@ Python News
(editors: check NEWS.help for information about editing NEWS using ReST.) (editors: check NEWS.help for information about editing NEWS using ReST.)
What's New in Python 2.5.5c2?
=============================
*Release date: xx-xxx-2010*
Extension Modules
-----------------
- Fix DoS via XML document with malformed UTF-8 sequences (CVE_2009_3560).
What's New in Python 2.5.5c1? What's New in Python 2.5.5c1?
============================= =============================

3
Modules/expat/xmlparse.c
View File

@ -3682,6 +3682,9 @@ doProlog(XML_Parser parser,
return XML_ERROR_UNCLOSED_TOKEN; return XML_ERROR_UNCLOSED_TOKEN;
case XML_TOK_PARTIAL_CHAR: case XML_TOK_PARTIAL_CHAR:
return XML_ERROR_PARTIAL_CHAR; return XML_ERROR_PARTIAL_CHAR;
case -XML_TOK_PROLOG_S:
tok = -tok;
break;
case XML_TOK_NONE: case XML_TOK_NONE:
#ifdef XML_DTD #ifdef XML_DTD
/* for internal PE NOT referenced between declarations */ /* for internal PE NOT referenced between declarations */