This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author vstinner
Recipients lemburg, ncoghlan, serhiy.storchaka, vstinner
Date 2013-11-16.00:47:09
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1384562829.72.0.617857672471.issue19619@psf.upfronthosting.co.za>
In-reply-to
Content
I propose to add new input_type and output_type to CodecInfo. These attributes would only be defined for base64, hex, ... codecs which are not the classic encode: str=>bytes, decode: bytes=>str codecs.

I also propose to modify str.encode() and bytes.encode() to only accept codecs using the right types. If the type doesn't match, the codec raises a LookupError.

This issue should avoid the denial of service attack when a compression codec is used, see:
https://mail.python.org/pipermail/python-dev/2013-November/130188.html
History
Date User Action Args
2013-11-16 00:47:09vstinnersetrecipients: + vstinner, lemburg, ncoghlan, serhiy.storchaka
2013-11-16 00:47:09vstinnersetmessageid: <1384562829.72.0.617857672471.issue19619@psf.upfronthosting.co.za>
2013-11-16 00:47:09vstinnerlinkissue19619 messages
2013-11-16 00:47:09vstinnercreate