Skip to content

zipfile - ZipExtFile.read goes into 100% CPU infinite loop on maliciously binary edited zips #64277

@nandiya

Description

@nandiya
mannequin
BPO 20078
Nosy @ronaldoussoren, @serhiy-storchaka
Files
  • malzip.py: A python script which creates the maliciously crafted zip and demonstrates hang (python3.3)
  • zipfile_eof.patch
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/serhiy-storchaka'
    closed_at = <Date 2014-01-09.18:20:51.690>
    created_at = <Date 2013-12-27.02:11:20.466>
    labels = ['type-security', 'library', 'expert-IO']
    title = 'zipfile - ZipExtFile.read goes into 100% CPU infinite loop on maliciously binary edited zips'
    updated_at = <Date 2014-01-09.18:20:51.689>
    user = 'https://bugs.python.org/nandiya'

    bugs.python.org fields:

    activity = <Date 2014-01-09.18:20:51.689>
    actor = 'serhiy.storchaka'
    assignee = 'serhiy.storchaka'
    closed = True
    closed_date = <Date 2014-01-09.18:20:51.690>
    closer = 'serhiy.storchaka'
    components = ['Library (Lib)', 'IO']
    creation = <Date 2013-12-27.02:11:20.466>
    creator = 'nandiya'
    dependencies = []
    files = ['33277', '33309']
    hgrepos = []
    issue_num = 20078
    keywords = ['patch']
    message_count = 5.0
    messages = ['206978', '207307', '207573', '207735', '207767']
    nosy_count = 5.0
    nosy_names = ['ronaldoussoren', 'cvrebert', 'python-dev', 'serhiy.storchaka', 'nandiya']
    pr_nums = []
    priority = 'normal'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue20078'
    versions = ['Python 3.3', 'Python 3.4']

    Metadata

    Metadata

    Labels

    stdlibStandard Library Python modules in the Lib/ directorytopic-IOtype-securityA security issue

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions