➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author christian.heimes
Recipients christian.heimes
Date 2012-09-25.10:36:09
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1348569370.53.0.568109495954.issue16039@psf.upfronthosting.co.za>
In-reply-to
Content 
This bug is similar to #16037 and a modified copy of #16038.

The imaplib module doesn't limit the amount of read data in its call to readline(). An erroneous or malicious IMAP server can trick the imaplib module to consume large amounts of memory.

Suggestion:
The imaplib module should be modified to use limited readline() with _MAXLINE like the httplib module.
History
Date User Action Args
2012-09-25 10:36:10christian.heimessetrecipients: + christian.heimes
2012-09-25 10:36:10christian.heimessetmessageid: <1348569370.53.0.568109495954.issue16039@psf.upfronthosting.co.za>
2012-09-25 10:36:10christian.heimeslinkissue16039 messages
2012-09-25 10:36:09christian.heimescreate