summaryrefslogtreecommitdiff
path: root/Lib/importlib/metadata.py
diff options
context:
space:
mode:
authorJason R. Coombs <jaraco@jaraco.com>2022-01-22 23:00:23 -0500
committerJason R. Coombs <jaraco@jaraco.com>2022-01-23 08:31:45 -0500
commit6e4eb09864aec1fb139f05612929cbe87a4ec694 (patch)
treef8c612492b6655280b577108de01747553786937 /Lib/importlib/metadata.py
parent7c5b01b5101923fc38274c491bd55239ee9f0416 (diff)
downloadcpython-git-backport-51c3e28-3.8.tar.gz
[3.8] bpo-46474: Avoid REDoS in EntryPoint.pattern (sync with importlib_metadata 4.10.1) (GH-30803).backport-51c3e28-3.8
(cherry picked from commit 51c3e28c8a163e58dc753765e3cc51d5a717e70d) Co-authored-by: Jason R. Coombs <jaraco@jaraco.com>
Diffstat (limited to 'Lib/importlib/metadata.py')
-rw-r--r--Lib/importlib/metadata.py4
1 files changed, 2 insertions, 2 deletions
diff --git a/Lib/importlib/metadata.py b/Lib/importlib/metadata.py
index 9d2285cb4d..c8d533c5c2 100644
--- a/Lib/importlib/metadata.py
+++ b/Lib/importlib/metadata.py
@@ -49,8 +49,8 @@ class EntryPoint(
pattern = re.compile(
r'(?P<module>[\w.]+)\s*'
- r'(:\s*(?P<attr>[\w.]+))?\s*'
- r'(?P<extras>\[.*\])?\s*$'
+ r'(:\s*(?P<attr>[\w.]+)\s*)?'
+ r'((?P<extras>\[.*\])\s*)?$'
)
"""
A regular expression describing the syntax for an entry point,