We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see ourdocumentation.
There was an error while loading.Please reload this page.
1 parentae19217 commitbb38b39Copy full SHA for bb38b39
Doc/whatsnew/3.11.rst
@@ -530,6 +530,17 @@ Other CPython Implementation Changes
530
and with the new:option:`--help-all`.
531
(Contributed by Éric Araujo in:issue:`46142`.)
532
533
+* Converting between:class:`int` and:class:`str` in bases other than 2
534
+ (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal)
535
+ now raises a:exc:`ValueError` if the number of digits in string form is
536
+ above a limit to avoid potential denial of service attacks due to the
537
+ algorithmic complexity. This is a mitigation for `CVE-2020-10735
538
+<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10735>`_.
539
+ This limit can be configured or disabled by environment variable, command
540
+ line flag, or:mod:`sys` APIs. See the:ref:`integer string conversion
541
+ length limitation <int_max_str_digits>` documentation. The default limit
542
+ is 4300 digits in string form.
543
+
544
545
.. _whatsnew311-new-modules:
546