bpo-44022: Fix http client infinite line reading (DoS) after a HTTP 100 Continue...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Wed, 5 May 2021 23:05:52 +0000 (16:05 -0700)
committerArnaud Rebillout <arnaudr@debian.org>
Tue, 14 Apr 2026 04:38:32 +0000 (11:38 +0700)
commit115483b063139d41fef2caed6f915f96bb4973d0
treef00a37ef03f43a4bf9b1fcab4e242d531adc9a7a
parent466ab006dc3b3d07fdc567cf886547832026d702
bpo-44022: Fix http client infinite line reading (DoS) after a HTTP 100 Continue (GH-25916)

Fixes http.client potential denial of service where it could get stuck reading lines from a malicious server after a 100 Continue response.

Co-authored-by: Gregory P. Smith <greg@krypto.org>
(cherry picked from commit 47895e31b6f626bc6ce47d175fe9d43c1098909d)

Co-authored-by: Gen Xu <xgbarry@gmail.com>
Gbp-Pq: Name 0005-bpo-44022-Fix-http-client-infinite-line-reading-DoS-.patch
Lib/http/client.py
Lib/test/test_httplib.py