Skip to content

Add test for CVE-2021-25292 ReDoS#5393

Merged
radarhere merged 1 commit intopython-pillow:masterfrom
hugovk:test-redos
Apr 9, 2021
Merged

Add test for CVE-2021-25292 ReDoS#5393
radarhere merged 1 commit intopython-pillow:masterfrom
hugovk:test-redos

Conversation

@hugovk
Copy link
Copy Markdown
Member

@hugovk hugovk commented Apr 8, 2021

Fixes #5392.

Changes proposed in this pull request:

  • Add a test to check the ReDoS fixed in CVE-2021-25292
  • The raised exception isn't relevant
  • The important thing is it doesn't timeout aka trigger the ReDoS

@hugovk hugovk added the Testing label Apr 8, 2021
@hugovk hugovk mentioned this pull request Apr 8, 2021
@radarhere radarhere merged commit 356681f into python-pillow:master Apr 9, 2021
@hugovk hugovk deleted the test-redos branch April 10, 2021 07:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Test files for CVEs

2 participants