Maniphest T4149

running a dot program in an infinite loop
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	skyronic
	Nov 22 2013, 7:47 PM

Tags

Referenced Files

None

Subscribers

Description

I haven't been able to verify this issue but I feel it's valid.

There are several specimens of graphviz dot files which sends the dot program into an infinite loop. Currently the dot ExecFuture doesn't have a timeout. I think it should have a timeout to prevent dot from over-loading the server with malicious graphviz code.

Revisions and Commits

Restricted Differential Revision

Restricted Diffusion Commit

Event Timeline

skyronic created this task.Nov 22 2013, 7:47 PM

skyronic raised the priority of this task from to Needs Triage.

skyronic updated the task description. (Show Details)

skyronic added a project: Remarkup.

skyronic added a subscriber: skyronic.

Yeah, I think this is reasonable.

epriestley edited this Maniphest Task.Nov 25 2013, 9:07 PM

epriestley edited this Maniphest Task.Nov 25 2013, 10:55 PM

Closed by commit rP3d9f656cfceb.

Herald added a subscriber: eadler. · View Herald TranscriptSep 15 2017, 5:26 PM