pmarti / python-messaging

Pure python SMS/MMS encoder/decoder
Other
225 stars 115 forks source link

Replace un-sanitized range calls with xrange calls, to neutralize a potential attack vector #19

Closed mikaelhg closed 13 years ago

mikaelhg commented 13 years ago

Just try x = range(1024*1024*1024) on your own computer, if you want to see why...

andrewbird commented 13 years ago

Happy to apply, thanks!

mikaelhg commented 13 years ago

Verified that this fixes the OOM "attack" from broken PDUs.

pmarti commented 13 years ago

Thanks @mikaelhg :)