diff options
| author | Antoine Pitrou <solipsis@pitrou.net> | 2015-04-11 00:31:01 +0200 |
|---|---|---|
| committer | Antoine Pitrou <solipsis@pitrou.net> | 2015-04-11 00:31:01 +0200 |
| commit | 2f3cceeca72c3ae5678261b8f1a44bb7e0b06057 (patch) | |
| tree | 874257fc91809f2619d78c6c5b851b68cca1129d /Doc/library/bz2.rst | |
| parent | 5c8bd625d0f00dd75adab1856f91d5b1af9ba0e3 (diff) | |
| download | cpython-2f3cceeca72c3ae5678261b8f1a44bb7e0b06057.tar.gz | |
Issue #23529: Limit the size of decompressed data when reading from
GzipFile, BZ2File or LZMAFile. This defeats denial of service attacks
using compressed bombs (i.e. compressed payloads which decompress to a huge
size).
Patch by Martin Panter and Nikolaus Rath.
Diffstat (limited to 'Doc/library/bz2.rst')
| -rw-r--r-- | Doc/library/bz2.rst | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/Doc/library/bz2.rst b/Doc/library/bz2.rst index ed28699597..1b8d9cffc6 100644 --- a/Doc/library/bz2.rst +++ b/Doc/library/bz2.rst @@ -120,6 +120,10 @@ All of the classes in this module may safely be accessed from multiple threads. .. versionchanged:: 3.4 The ``'x'`` (exclusive creation) mode was added. + .. versionchanged:: 3.5 + The :meth:`~io.BufferedIOBase.read` method now accepts an argument of + ``None``. + Incremental (de)compression --------------------------- |