[issue24456] audioop.adpcm2lin Buffer Over-read

Changes by Arfrever Frehtes Taifersar Arahesis : -- nosy: +Arfrever ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscri

[issue24456] audioop.adpcm2lin Buffer Over-read

Changes by Serhiy Storchaka : -- resolution: -> fixed stage: needs patch -> resolved status: open -> closed ___ Python tracker ___ __

[issue24456] audioop.adpcm2lin Buffer Over-read

Serhiy Storchaka added the comment: The patch for 2.7 also fixed SystemError and possible memory leak. -- ___ Python tracker ___ ___ P

[issue24456] audioop.adpcm2lin Buffer Over-read

Roundup Robot added the comment: New changeset 1f6c096ee772 by Serhiy Storchaka in branch '2.7': Issue #24456: Fixed possible buffer over-read in adpcm2lin() and lin2adpcm() https://hg.python.org/cpython/rev/1f6c096ee772 New changeset fd17e168b59f by Serhiy Storchaka in branch '3.4': Issue #2445

[issue24456] audioop.adpcm2lin Buffer Over-read

Serhiy Storchaka added the comment: Here is a patch that checks the state and raises ValueError if integer values out of range. -- keywords: +patch Added file: http://bugs.python.org/file39816/audioop_adpcm_range_check.patch ___ Python tracker

[issue24456] audioop.adpcm2lin Buffer Over-read

Changes by Serhiy Storchaka : -- stage: -> needs patch versions: +Python 3.4, Python 3.5, Python 3.6 ___ Python tracker ___ ___ Pytho

[issue24456] audioop.adpcm2lin Buffer Over-read

Changes by Serhiy Storchaka : -- assignee: -> serhiy.storchaka nosy: +serhiy.storchaka ___ Python tracker ___ ___ Python-bugs-list ma

[issue24456] audioop.adpcm2lin Buffer Over-read

New submission from JohnLeitch: The audioop.adpcm2lin function suffers from a buffer over-read caused by unchecked access to stepsizeTable at line 1545 of Modules\audioop.c: } else if ( !PyArg_ParseTuple(state, "ii", &valpred, &index) ) return 0; step = stepsizeTable[index];