[New-bugs-announce] [issue16041] poplib: unlimited readline() from connection

Christian Heimes report at bugs.python.org
Tue Sep 25 12:39:23 CEST 2012

New submission from Christian Heimes:

This bug is similar to #16037 and a modified copy of #16038.

The poplib module doesn't limit the amount of read data in its call to readline(). An erroneous or malicious POP3 server can trick the poplib module to consume large amounts of memory.

The poplib module should be modified to use limited readline() with _MAXLINE like the httplib module.

components: Library (Lib)
messages: 171244
nosy: christian.heimes
priority: normal
severity: normal
status: open
title: poplib: unlimited readline() from connection
type: resource usage
versions: Python 2.7, Python 3.2, Python 3.3

Python tracker <report at bugs.python.org>

More information about the New-bugs-announce mailing list