Message412972
Providing an (invalid) input to the parser causes an exponentially-slow DoS to the Python executable in 3.10.
e.g.
python3.10 -c "{{{{{{{{{{{{{{{{{{{{{:"
takes ~2 seconds
python3.10 -c "{{{{{{{{{{{{{{{{{{{{{{{{:"
takes ~22 seconds
Tested this all the way up to
d{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{```{{{{{{{ef f():y
which took over an hour |
|
| Date |
User |
Action |
Args |
| 2022-02-10 03:00:43 | anthonypjshaw | set | recipients:
+ anthonypjshaw, lys.nikolaou, pablogsal |
| 2022-02-10 03:00:43 | anthonypjshaw | set | messageid: <1644462043.51.0.510568323188.issue46707@roundup.psfhosted.org> |
| 2022-02-10 03:00:43 | anthonypjshaw | link | issue46707 messages |
| 2022-02-10 03:00:43 | anthonypjshaw | create | |
|
➜
