Skip to content

[3.8] gh-98433: Fix quadratic time idna decoding. (GH-99092) (GH-99222) #99231

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Nov 10, 2022

Conversation

miss-islington
Copy link
Contributor

@miss-islington miss-islington commented Nov 8, 2022

There was an unnecessary quadratic loop in idna decoding. This restores
the behavior to linear.

(cherry picked from commit d315722)

(cherry picked from commit a6f6c3a)

Co-authored-by: Miss Islington (bot) [email protected]
Co-authored-by: Gregory P. Smith [email protected]

) (pythonGH-99222)

There was an unnecessary quadratic loop in idna decoding. This restores
the behavior to linear.

(cherry picked from commit d315722)

(cherry picked from commit a6f6c3a)

Co-authored-by: Miss Islington (bot) <[email protected]>
Co-authored-by: Gregory P. Smith <[email protected]>
@bedevere-bot bedevere-bot added type-bug An unexpected behavior, bug, or error type-security A security issue labels Nov 8, 2022
@gpshead gpshead changed the title [3.8] [3.11] gh-98433: Fix quadratic time idna decoding. (GH-99092) (GH-99222) [3.8] gh-98433: Fix quadratic time idna decoding. (GH-99092) (GH-99222) Nov 8, 2022
@miss-islington
Copy link
Contributor Author

Sorry, I can't merge this PR. Reason: You're not authorized to push to this branch. Visit https://docs.github.com/articles/about-protected-branches/ for more information..

Copy link
Member

@vstinner vstinner left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, good bot.

@vstinner
Copy link
Member

vstinner commented Nov 9, 2022

@ambv: Would you mind to merge this security fix? It's already in other branches, including 3.7 ;-)

@ambv ambv merged commit 82ca283 into python:3.8 Nov 10, 2022
@miss-islington miss-islington deleted the backport-a6f6c3a-3.8 branch November 10, 2022 15:56
@ngie-eign
Copy link
Contributor

ngie-eign commented Nov 15, 2022

@ambv : is there a plan for when the next 3.8 release might be cut? I noticed that this item wasn't in .15; Blackduck is already citing this as an issue, so the need for resolving this in cpython and trickling the fix down will need to come sooner rather than later.

@gpshead
Copy link
Member

gpshead commented Nov 15, 2022

Release manager conversations recently suggest they'll be coordinating releases for the week of December 5th.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
release-blocker type-bug An unexpected behavior, bug, or error type-security A security issue
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants