[CVE-2022-45061] Fix quadratic time idna decoding. 38/290538/1 accepted/tizen_8.0_base accepted/tizen_base accepted/tizen_base_tool tizen_8.0_base tizen_base accepted/tizen/8.0/base/20231005.045056 accepted/tizen/base/20230714.003458 accepted/tizen/base/tool/20230330.065249 submit/tizen_base/20230329.061525 tizen_8.0_m2_release
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Tue, 8 Nov 2022 02:57:10 +0000 (18:57 -0800)
committerJinWang An <jinwang.an@samsung.com>
Tue, 28 Mar 2023 08:34:35 +0000 (17:34 +0900)
commit52ae196bd49f8e919ff08e0609155f5fa16c9a28
treee7ddbe3ca41f8fd2c8d57992d7817d932d241adc
parenta754404f28cb521042d9b05ec3265d7413502096
[CVE-2022-45061] Fix quadratic time idna decoding.

gh-98433: Fix quadratic time idna decoding. (GH-99092) (GH-99222)

There was an unnecessary quadratic loop in idna decoding. This restores
the behavior to linear.

(cherry picked from commit d315722564927c7202dd6e111dc79eaf14240b0d)

(cherry picked from commit a6f6c3a3d6f2b580f2d87885c9b8a9350ad7bf15)

Change-Id: I44e6d661eaaf144e742c1d30712d60785a4fee0c
Co-authored-by: Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Signed-off-by: JinWang An <jinwang.an@samsung.com>
Lib/encodings/idna.py
Lib/test/test_codecs.py
Misc/NEWS.d/next/Security/2022-11-04-09-29-36.gh-issue-98433.l76c5G.rst [new file with mode: 0644]