SIGN IN SIGN UP

[3.11] gh-119342: Fix a potential denial of service in plistlib (GH-119343) (#142150)

Reading a specially prepared small Plist file could cause OOM because file's
read(n) preallocates a bytes object for reading the specified amount of
data. Now plistlib reads large data by chunks, therefore the upper limit of
consumed memory is proportional to the size of the input file.
(cherry picked from commit 694922cf40aa3a28f898b5f5ee08b71b4922df70)
S
Serhiy Storchaka committed
cefee7d118a26ef6cd43db59bb9d98ca9a331111
Parent: 0557a1f
Committed by GitHub <noreply@github.com> on 3/2/2026, 10:55:04 PM