Skip to content

IPv6 address parsing doesn't limit buffer size #128840

Closed
@sethmlarson

Description

@sethmlarson

Bug report

Bug description:

IPv6 addresses have a maximum length (8 colon-separated parts) but the current implementation doesn't limit the length. Similar issue to django/django@ca2be77

CPython versions tested on:

CPython main branch

Operating systems tested on:

No response

Linked PRs

Activity

added a commit that references this issue on Jan 14, 2025

pythonGH-128840: Limit the number of parts in IPv6 address parsing

115bec4
serhiy-storchaka

serhiy-storchaka commented on Jan 15, 2025

@serhiy-storchaka
Member

I do not think this is a security issue.

added a commit that references this issue on May 24, 2025

gh-128840: Limit the number of parts in IPv6 address parsing (GH-128841)

47f1161
added a commit that references this issue on May 24, 2025

pythongh-128840: Limit the number of parts in IPv6 address parsing (p…

56 remaining items

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    Status

    Done

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      IPv6 address parsing doesn't limit buffer size · Issue #128840 · python/cpython

      Follow Lee on X/Twitter - Father, Husband, Serial builder creating AI, crypto, games & web tools. We are friends :) AI Will Come To Life!

      Check out: eBank.nz (Art Generator) | Netwrck.com (AI Tools) | Text-Generator.io (AI API) | BitBank.nz (Crypto AI) | ReadingTime (Kids Reading) | RewordGame | BigMultiplayerChess | WebFiddle | How.nz | Helix AI Assistant