Message191963
It is possible to craft a MO file with Plural-Forms taking arbitrary amounts of CPU and memory to evaluate. A test case is attached.
I realize that opening unstrusted MO files is a rather unusual use case, but the module already contains some code to protect againt malicious Plural-Forms, so I thought you might want to fix this problem as well. |
|
Date |
User |
Action |
Args |
2013-06-27 22:01:26 | jwilk | set | recipients:
+ jwilk |
2013-06-27 22:01:26 | jwilk | set | messageid: <1372370486.3.0.302841036863.issue18317@psf.upfronthosting.co.za> |
2013-06-27 22:01:26 | jwilk | link | issue18317 messages |
2013-06-27 22:01:26 | jwilk | create | |
|