Skip to content

gh-141713: Prevent possible memory denial of service when reading - #142022

Open
serhiy-storchaka wants to merge 2 commits into
python:mainfrom
serhiy-storchaka:io-read-oom
Open

gh-141713: Prevent possible memory denial of service when reading#142022
serhiy-storchaka wants to merge 2 commits into
python:mainfrom
serhiy-storchaka:io-read-oom

Conversation

@serhiy-storchaka

@serhiy-storchakaserhiy-storchaka commented Nov 27, 2025

Copy link
Copy Markdown
Member

Make read() and similar methods that read a given number of bytes use a progressively growing buffer instead of allocating the maximum size buffer at once. This helps prevent certain kind of memory denial of service issues when the number of bytes to read within a specific protocol or format is received from untrusted source.

Make read() and similar methods that read a given number of bytes use
a progressively growing buffer instead of allocating the maximum size buffer
at once. This helps prevent certain kind of memory denial of service issues
when the number of bytes to read within a specific protocol or format is
received from untrusted source.
@github-actions

Copy link
Copy Markdown

This PR is stale because it has been open for 30 days with no activity.

@github-actionsgithub-actionsBot added the stale Stale PR or inactive for long period of time. label May 2, 2026
@serhiy-storchakaserhiy-storchaka added the needs backport to 3.15 pre-release feature fixes, bugs and security fixes label May 30, 2026
@github-actionsgithub-actionsBot removed the stale Stale PR or inactive for long period of time. label Jun 2, 2026
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

awaiting core reviewneeds backport to 3.10only security fixesneeds backport to 3.11only security fixesneeds backport to 3.12only security fixesneeds backport to 3.13bugs and security fixesneeds backport to 3.14bugs and security fixesneeds backport to 3.15pre-release feature fixes, bugs and security fixestype-securityA security issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@serhiy-storchaka@jalaheshammohamed-sketch