From ac650d02cbb66ab652ae529b8f03b486ef974dfb Mon Sep 17 00:00:00 2001 From: Raul Cumplido Date: Sat, 24 Jan 2015 12:14:30 +0000 Subject: Fixed #24209 -- Prevented crash when parsing malformed RFC 2231 headers Thanks Tom Christie for the report and review. --- django/http/multipartparser.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'django') diff --git a/django/http/multipartparser.py b/django/http/multipartparser.py index 07c874e08f..e1de03f8b1 100644 --- a/django/http/multipartparser.py +++ b/django/http/multipartparser.py @@ -643,7 +643,8 @@ def parse_header(line): # Lang/encoding embedded in the value (like "filename*=UTF-8''file.ext") # http://tools.ietf.org/html/rfc2231#section-4 name = name[:-1] - has_encoding = True + if p.count(b"'") == 2: + has_encoding = True value = p[i + 1:].strip() if has_encoding: encoding, lang, value = value.split(b"'") -- cgit v1.3