You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Note: this may be considered a security issue, but I didn't think delaying disclosure made any sense, since the JSONTestSuite tests are public and have been for months, and were discussed in the press more than once.
This implements a maximum recursion depth when parsing arrays
and objects, to prevent the potential to crash the parser by
asking it to parse something with a huge amount of recursion.
The issue was discovered using Nicolas Seriot's JSONTestSuite:
https://github.com/nst/JSONTestSuite
The fix is directly inspired by the similar protection in
ultrajson / ujson:
https://github.com/esnme/ultrajson
Signed-off-by: Adam Williamson <[email protected]>
Like #1, this is another of the JSONTestSuite tests. The test file is this one, it just contains several thousand repetitions of
[{"":
, like this:etc etc etc. Trying to parse it crashes Python, with another gigantic backtrace. It starts like this:
and ends like this:
The text was updated successfully, but these errors were encountered: