René's URL Explorer Experiment


Title: [3.11] gh-95778: CVE-2020-10735: Prevent DoS by very large int() by gpshead · Pull Request #96500 · python/cpython · GitHub

Open Graph Title: [3.11] gh-95778: CVE-2020-10735: Prevent DoS by very large int() by gpshead · Pull Request #96500 · python/cpython

X Title: [3.11] gh-95778: CVE-2020-10735: Prevent DoS by very large int() by gpshead · Pull Request #96500 · python/cpython

Description: Integer to and from text conversions via CPython's bignum int type is not safe against denial of service attacks due to malicious input. Very large input strings with hundred thousands of digits ca...

Open Graph Description: Integer to and from text conversions via CPython's bignum int type is not safe against denial of service attacks due to malicious input. Very large input strings with hundred thousands of digit...

X Description: Integer to and from text conversions via CPython's bignum int type is not safe against denial of service attacks due to malicious input. Very large input strings with hundred thousands of d...

Mail addresses
christian@python.org
greg@krypto.org

Opengraph URL: https://github.com/python/cpython/pull/96500

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:1462ad37-86e2-2002-c525-6f899408da9b
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idDF8C:2E1DE1:F36A66:144E871:696990E2
html-safe-nonce8cd360cf774cda350e4808abd0a9c2b2545c5bef8ccea2267b34110a96009a71
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJERjhDOjJFMURFMTpGMzZBNjY6MTQ0RTg3MTo2OTY5OTBFMiIsInZpc2l0b3JfaWQiOiI4OTk5MTcyMjMzMjE2MjMzNjk4IiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0=
visitor-hmaca2e5489b741ae9d4c27b391820e2abec9c2c16038e6e2382dffa70a547a74518
hovercard-subject-tagpull_request:1044480749
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/python/cpython/96500/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/6ad1b6f57a6cee5d3cc728d988ea79effd5bbcd0121224c9139f57fc63e48257/python/cpython/pull/96500
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/6ad1b6f57a6cee5d3cc728d988ea79effd5bbcd0121224c9139f57fc63e48257/python/cpython/pull/96500
og:image:altInteger to and from text conversions via CPython's bignum int type is not safe against denial of service attacks due to malicious input. Very large input strings with hundred thousands of digit...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernamegpshead
hostnamegithub.com
expected-hostnamegithub.com
None3542e147982176a7ebaa23dfb559c8af16f721c03ec560c68c56b64a0f35e751
turbo-cache-controlno-preview
go-importgithub.com/python/cpython git https://github.com/python/cpython.git
octolytics-dimension-user_id1525981
octolytics-dimension-user_loginpython
octolytics-dimension-repository_id81598961
octolytics-dimension-repository_nwopython/cpython
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id81598961
octolytics-dimension-repository_network_root_nwopython/cpython
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
releaseaf80af7cc9e3de9c336f18b208a600950a3c187c
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/python/cpython/pull/96500#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fpull%2F96500
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub SparkBuild and deploy intelligent appshttps://github.com/features/spark
GitHub ModelsManage and compare promptshttps://github.com/features/models
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fpull%2F96500
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=python%2Fcpython
Reloadhttps://github.com/python/cpython/pull/96500
Reloadhttps://github.com/python/cpython/pull/96500
Reloadhttps://github.com/python/cpython/pull/96500
python https://github.com/python
cpythonhttps://github.com/python/cpython
Please reload this pagehttps://github.com/python/cpython/pull/96500
Notifications https://github.com/login?return_to=%2Fpython%2Fcpython
Fork 33.9k https://github.com/login?return_to=%2Fpython%2Fcpython
Star 71.1k https://github.com/login?return_to=%2Fpython%2Fcpython
Code https://github.com/python/cpython
Issues 5k+ https://github.com/python/cpython/issues
Pull requests 2.1k https://github.com/python/cpython/pulls
Actions https://github.com/python/cpython/actions
Projects 31 https://github.com/python/cpython/projects
Security Uh oh! There was an error while loading. Please reload this page. https://github.com/python/cpython/security
Please reload this pagehttps://github.com/python/cpython/pull/96500
Insights https://github.com/python/cpython/pulse
Code https://github.com/python/cpython
Issues https://github.com/python/cpython/issues
Pull requests https://github.com/python/cpython/pulls
Actions https://github.com/python/cpython/actions
Projects https://github.com/python/cpython/projects
Security https://github.com/python/cpython/security
Insights https://github.com/python/cpython/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fpython%2Fcpython%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fpython%2Fcpython%2Fissues%2Fnew%2Fchoose
Jump to bottomhttps://github.com/python/cpython/pull/96500#issue-comment-box
gpsheadhttps://github.com/gpshead
python:3.11https://github.com/python/cpython/tree/3.11
gpshead:CVE-2020-10735-3.11backporthttps://github.com/gpshead/cpython/tree/CVE-2020-10735-3.11backport
[3.11] gh-95778: CVE-2020-10735: Prevent DoS by very large int() https://github.com/python/cpython/pull/96500#top
gpsheadhttps://github.com/gpshead
python:3.11https://github.com/python/cpython/tree/3.11
gpshead:CVE-2020-10735-3.11backporthttps://github.com/gpshead/cpython/tree/CVE-2020-10735-3.11backport
Conversation 4 https://github.com/python/cpython/pull/96500
Commits 11 https://github.com/python/cpython/pull/96500/commits
Checks 0 https://github.com/python/cpython/pull/96500/checks
Files changed https://github.com/python/cpython/pull/96500/files
Please reload this pagehttps://github.com/python/cpython/pull/96500
https://github.co/hiddenchars
https://github.com/python/cpython/pull/{{ revealButtonHref }}
https://github.com/gpshead
gpsheadhttps://github.com/gpshead
Sep 2, 2022https://github.com/python/cpython/pull/96500#issue-1359691456
Please reload this pagehttps://github.com/python/cpython/pull/96500
#96499https://github.com/python/cpython/pull/96499
511ca94https://github.com/python/cpython/commit/511ca9452033ef95bc7d7fc404b8161068226002
CVE-2020-10735: Prevent DoS by large int<->str conversions #95778https://github.com/python/cpython/issues/95778
a one pager for the release managershttps://docs.google.com/document/d/1KjuF_aXlzPUxTK4BMgezGJ2Pn7uevfX7g0_mvgHlL7Y/edit
Please reload this pagehttps://github.com/python/cpython/pull/96500
gpsheadhttps://github.com/gpshead
September 1, 2022 09:40https://github.com/python/cpython/pull/96500#commits-pushed-80dba63
https://github.com/gpshead
https://github.com/tiran
Backport to 3.11 from psrt/CVE-2020-10735@ee533c68.https://github.com/python/cpython/pull/96500/commits/80dba636dd9927e28381a3d611fec4a020dc1f9f
80dba63https://github.com/python/cpython/pull/96500/commits/80dba636dd9927e28381a3d611fec4a020dc1f9f
https://github.com/gpshead
https://github.com/tiran
Add the whatsnew entry.https://github.com/python/cpython/pull/96500/commits/b9f4e8957d18069ad9c7527f59728c2533ac5e93
b9f4e89https://github.com/python/cpython/pull/96500/commits/b9f4e8957d18069ad9c7527f59728c2533ac5e93
https://github.com/gpshead
https://github.com/tiran
Update attribution in Misc/NEWS.dhttps://github.com/python/cpython/pull/96500/commits/58a4f643546caa7f6ad962d67f4e5dfcbedb9a9c
58a4f64https://github.com/python/cpython/pull/96500/commits/58a4f643546caa7f6ad962d67f4e5dfcbedb9a9c
https://github.com/tiran
Move int_max_str_digits out of PyInterpreterStatehttps://github.com/python/cpython/pull/96500/commits/9e1f13d48f52cfe24fb49967bda97d05904c1c95
9e1f13dhttps://github.com/python/cpython/pull/96500/commits/9e1f13d48f52cfe24fb49967bda97d05904c1c95
1333440https://github.com/gpshead/cpython/commit/1333440948c94021c52b0e70790870e2ab281696
1333504https://github.com/gpshead/cpython/commit/1333504d349ea1a96210c490c849ebdc254b96c9
https://github.com/tiran
Revert "Move int_max_str_digits out of PyInterpreterState"https://github.com/python/cpython/pull/96500/commits/4647594b21a523c654c87f9e88b2c23ddc730bf8
4647594https://github.com/python/cpython/pull/96500/commits/4647594b21a523c654c87f9e88b2c23ddc730bf8
9e1f13dhttps://github.com/gpshead/cpython/commit/9e1f13d48f52cfe24fb49967bda97d05904c1c95
https://github.com/tiran
Manually add new field to abi filehttps://github.com/python/cpython/pull/96500/commits/53e12ec712b990969bc08f28da9d7f2047eb8fd8
53e12echttps://github.com/python/cpython/pull/96500/commits/53e12ec712b990969bc08f28da9d7f2047eb8fd8
https://github.com/gpshead
Make the doctest actually run & fix it.https://github.com/python/cpython/pull/96500/commits/90e020b7ad592bbe868501fca8de50d6e6922ff8
90e020bhttps://github.com/python/cpython/pull/96500/commits/90e020b7ad592bbe868501fca8de50d6e6922ff8
https://github.com/gpshead
Fix the docs build.https://github.com/python/cpython/pull/96500/commits/d6d668a7c3a8211057c3df7b2fc35570a3cc6904
d6d668ahttps://github.com/python/cpython/pull/96500/commits/d6d668a7c3a8211057c3df7b2fc35570a3cc6904
https://github.com/gpshead
gpsheadhttps://github.com/gpshead
Sep 2, 2022https://github.com/python/cpython/pull/96500#event-7310223800
https://github.com/bedevere-bot
bedevere-bothttps://github.com/bedevere-bot
awaiting core review https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22awaiting%20core%20review%22
Sep 2, 2022https://github.com/python/cpython/pull/96500#event-7310223927
https://github.com/gpshead
gpsheadhttps://github.com/gpshead
pablogsalhttps://github.com/pablogsal
Sep 2, 2022https://github.com/python/cpython/pull/96500#event-7310225119
gpsheadhttps://github.com/gpshead
September 1, 2022 21:33https://github.com/python/cpython/pull/96500#commits-pushed-dfe1922
https://github.com/gpshead
Merge branch '3.11' intohttps://github.com/python/cpython/pull/96500/commits/dfe192294debef41f739be7104dc1ea9a8bf2366
CVE-2020-10735https://github.com/advisories/GHSA-6jr7-xr67-mgxw
-3.11backporthttps://github.com/python/cpython/pull/96500/commits/dfe192294debef41f739be7104dc1ea9a8bf2366
dfe1922https://github.com/python/cpython/pull/96500/commits/dfe192294debef41f739be7104dc1ea9a8bf2366
https://github.com/gpshead
Rename the news file to appease the Bedevere bot.https://github.com/python/cpython/pull/96500/commits/282052ffd32c3a62a122b820124348619399811b
282052fhttps://github.com/python/cpython/pull/96500/commits/282052ffd32c3a62a122b820124348619399811b
https://github.com/gpshead
gpsheadhttps://github.com/gpshead
release-blocker https://github.com/python/cpython/issues?q=state%3Aopen%20label%3Arelease-blocker
Sep 2, 2022https://github.com/python/cpython/pull/96500#event-7310299728
https://github.com/tiran
tiranhttps://github.com/tiran
🔨 test-with-buildbots https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22%3Ahammer%3A%20test-with-buildbots%22
Sep 2, 2022https://github.com/python/cpython/pull/96500#event-7310306659
https://github.com/bedevere-bot
bedevere-bothttps://github.com/bedevere-bot
Sep 2, 2022https://github.com/python/cpython/pull/96500#issuecomment-1235068241
@tiranhttps://github.com/tiran
282052fhttps://github.com/python/cpython/commit/282052ffd32c3a62a122b820124348619399811b
Please reload this pagehttps://github.com/python/cpython/pull/96500
https://github.com/bedevere-bot
bedevere-bothttps://github.com/bedevere-bot
🔨 test-with-buildbots https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22%3Ahammer%3A%20test-with-buildbots%22
Sep 2, 2022https://github.com/python/cpython/pull/96500#event-7310306821
https://github.com/gpshead
gpsheadhttps://github.com/gpshead
September 2, 2022 05:56https://github.com/python/cpython/pull/96500#event-7310497988
https://github.com/gpshead
gpsheadhttps://github.com/gpshead
lysnikolaouhttps://github.com/lysnikolaou
pablogsalhttps://github.com/pablogsal
rhettingerhttps://github.com/rhettinger
terryjreedyhttps://github.com/terryjreedy
code ownershttps://github.com/python/cpython/blob/fca8e94dbfc4a9164007063ddf7f2d72e75a4dc2/.github/CODEOWNERS#L85
September 2, 2022 05:56https://github.com/python/cpython/pull/96500#event-7310498002
https://github.com/njsmith
njsmithhttps://github.com/njsmith
Sep 2, 2022 https://github.com/python/cpython/pull/96500#pullrequestreview-1094373741
View reviewed changes https://github.com/python/cpython/pull/96500/files/282052ffd32c3a62a122b820124348619399811b
Doc/library/stdtypes.rsthttps://github.com/python/cpython/pull/96500/files/282052ffd32c3a62a122b820124348619399811b#diff-08a31a70dd1f6d97aa8dacdce77db4de04c700d9949be1af611a595186aad5b3
Please reload this pagehttps://github.com/python/cpython/pull/96500
https://github.com/gpshead
hexadecimal spelling =)https://github.com/python/cpython/pull/96500/commits/c4aea14ea5e074bd0d6660f63002be525ce07905
c4aea14https://github.com/python/cpython/pull/96500/commits/c4aea14ea5e074bd0d6660f63002be525ce07905
https://github.com/gpshead
gpsheadhttps://github.com/gpshead
f8b71dahttps://github.com/python/cpython/commit/f8b71da9aac6ea74808dcdd0cc266e705431356b
Sep 2, 2022https://github.com/python/cpython/pull/96500#event-7314642222
https://github.com/bedevere-bot
bedevere-bothttps://github.com/bedevere-bot
awaiting core review https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22awaiting%20core%20review%22
Sep 2, 2022https://github.com/python/cpython/pull/96500#event-7314642596
https://github.com/gpshead
gpsheadhttps://github.com/gpshead
Sep 4, 2022https://github.com/python/cpython/pull/96500#issuecomment-1236259603
#96537https://github.com/python/cpython/pull/96537
Please reload this pagehttps://github.com/python/cpython/pull/96500
https://github.com/CAM-Gerlach
CAM-Gerlachhttps://github.com/CAM-Gerlach
Oct 16, 2022 https://github.com/python/cpython/pull/96500#ref-pullrequest-1410657832
gh-95913: Forward-port int/str security change to 3.11 What's New in main #98344 https://github.com/python/cpython/pull/98344
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fpull%2F96500
https://github.com/njsmith
njsmith https://github.com/njsmith
https://github.com/python/cpython/pull/96500/files/282052ffd32c3a62a122b820124348619399811b
https://github.com/terryjreedy
terryjreedy https://github.com/terryjreedy
https://github.com/rhettinger
rhettinger https://github.com/rhettinger
https://github.com/pablogsal
pablogsal https://github.com/pablogsal
https://github.com/lysnikolaou
lysnikolaou https://github.com/lysnikolaou
https://github.com/gpshead
gpshead https://github.com/gpshead
https://github.com/pablogsal
pablogsal https://github.com/pablogsal
release-blocker https://github.com/python/cpython/issues?q=state%3Aopen%20label%3Arelease-blocker
Please reload this pagehttps://github.com/python/cpython/pull/96500
https://github.com/gpshead
https://github.com/bedevere-bot
https://github.com/njsmith
https://github.com/tiran
https://github.com/pablogsal
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width


URLs of crawlers that visited me.