Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixed #27397 -- Prevented integer overflows on integer field lookups. #16599

Merged
merged 1 commit into from
Mar 9, 2023

Conversation

charettes
Copy link
Member

This prevents a sqlite3 crash and address a potential DDoS vector on Postgres caused by full-table-scans on overflows.

@aditya270520

This comment was marked as resolved.

@felixxm

This comment was marked as resolved.

Copy link
Member

@felixxm felixxm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@charettes Thanks 👍

32d4b61 is merged.

django/db/models/lookups.py Outdated Show resolved Hide resolved
This prevents a sqlite3 crash and address a potential DDoS vector on
PostgreSQL caused by full-table-scans on overflows.
Copy link
Member

@felixxm felixxm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@charettes Thanks 👍 Looks great 🥇

@felixxm felixxm merged commit dde2537 into django:main Mar 9, 2023
@charettes charettes deleted the ticket-27397 branch March 9, 2023 16:09
@felixxm felixxm temporarily deployed to schedules March 10, 2023 03:00 — with GitHub Actions Inactive
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants