cpython/Lib/http
Miss Islington (bot) fa1aae0e34
[3.11] gh-119452: Fix a potential virtual memory allocation denial of service in http.server (GH-142216) (#142298)
[3.14] gh-119452: Fix a potential virtual memory allocation denial of service in http.server (GH-142216)

The CGI server on Windows could consume the amount of memory specified
in the Content-Length header of the request even if the client does not
send such much data. Now it reads the POST request body by chunks,
therefore the memory consumption is proportional to the amount of sent
data.
(cherry picked from commit 0e4f4f1a46)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
2026-01-25 17:10:45 +00:00
..
__init__.py gh-91996: Add an HTTPMethod StrEnum to http (GH-91997) 2022-05-05 15:39:02 -07:00
client.py [3.11] gh-100985: Consistently wrap IPv6 IP address during CONNECT (GH-100986) (GH-115606) 2024-02-17 14:15:21 +00:00
cookiejar.py [3.11] gh-99576: Fix cookiejar file that was not truncated for some classes (GH-99616) (GH-100377) 2022-12-20 18:22:39 +01:00
cookies.py [3.11] gh-143919: Reject control characters in http cookies (#144092) 2026-01-25 17:10:18 +00:00
server.py [3.11] gh-119452: Fix a potential virtual memory allocation denial of service in http.server (GH-142216) (#142298) 2026-01-25 17:10:45 +00:00