[issue24803] PyNumber_Long Buffer Over-read.patch

Serhiy Storchaka added the comment: Merged with issue24802. -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___ ___

[issue24803] PyNumber_Long Buffer Over-read.patch

Changes by Eric V. Smith : -- nosy: +eric.smith ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.py

[issue24803] PyNumber_Long Buffer Over-read.patch

Changes by Serhiy Storchaka : -- versions: +Python 2.7, Python 3.4, Python 3.6 ___ Python tracker ___ ___ Python-bugs-list mailing lis

[issue24803] PyNumber_Long Buffer Over-read.patch

Changes by Serhiy Storchaka : -- assignee: -> serhiy.storchaka components: +Interpreter Core nosy: +serhiy.storchaka stage: -> patch review type: security -> crash ___ Python tracker _

[issue24803] PyNumber_Long Buffer Over-read.patch

John Leitch added the comment: Attaching repro. -- Added file: http://bugs.python.org/file40135/PyNumber_Long_Buffer_Over-read.py ___ Python tracker ___ _

[issue24803] PyNumber_Long Buffer Over-read.patch

New submission from John Leitch: Python suffers from a buffer over-read in PyNumber_Long() that is caused by the incorrect assumption that buffers returned by PyObject_GetBuffer() are null-terminated. This could potentially result in the disclosure of adjacent memory. PyObject * PyNumber_Long