[issue1363] python 2.4.4 fails on solaris (sun4u sparc SUNW, Sun-Fire-880)

2007-10-30 Thread Paul
Paul added the comment: Trying to compile Plone (3.0.2) on a Sun V880 (SunOS genome 5.10 Generic_125100-05 sun4u sparc SUNW,Sun-Fire-880). Plone is a web application which runs on the Zope framework. What fails is the python (2.4.4) which is distributed with Zope. During the configure step of

[issue1363] python 2.4.4 fails on solaris (sun4u sparc SUNW, Sun-Fire-880)

2007-10-30 Thread Paul
New submission from Paul: Trying to compile Plone (3.0.2) on a Sun V880 (SunOS genome 5.10 Generic_125100-05 sun4u sparc SUNW,Sun-Fire-880). Plone is a web application which runs on the Zope framework. What fails is the python (2.4.4) which is distributed with Zope. During the configure step

[issue6434] buffer overflow in Zipfile when wrinting more than 2gig file

2011-10-27 Thread Paul
Paul added the comment: This is a problem with python2.7 as well. A change in struct between python2.6 and 2.7 raises an exception on overflow instead of silently allowing it. This prevents zipping any file larger than 4.5G. This exception concurs when writing the 32-bit headers (which

[issue6434] buffer overflow in Zipfile when wrinting more than 2gig file

2011-10-27 Thread Paul
Paul added the comment: I attempted to "re-allow overflow" in the struct(...) call by replacing `zinfo.file_size` with `ZIP64_LIMIT % zinfo.file_size` in zipfile.py, and successfully produced a compressed file from a 10G file, but the resulting compressed file could not be uncomp

[issue5396] os.read not handling O_DIRECT flag

2019-09-12 Thread Paul
Paul added the comment: Michael, I ran into the same issue as you. I got it to work by changing the mmap size to 8K. d = os.open(disk_file_path, os.O_RDWR | os.O_DIRECT | os.O_SYNC | os.O_DSYNC) readbuf = mmap.mmap(-1, 8192) os.lseek(d, 0, os.SEEK_SET) fo = os.fdopen(d, 'rb') f

[issue5396] os.read not handling O_DIRECT flag

2019-09-13 Thread Paul
Paul added the comment: I've dug into stracing this python program in 2.7 vs. 3.7. directread.py import mmap import os fd = os.open('/dev/dm-2', os.O_DIRECT | os.O_RDWR) # mapped block device fo = os.fdopen(fd, 'rb+') m = mmap.mmap(-1, 4096) fo.readinto(m) Pyt

[issue38167] O_DIRECT read fails with 4K mmap buffer

2019-09-13 Thread Paul
New submission from Paul : The following Python3 script fails. import mmap import os fd = os.open(path_to_file, os.O_DIRECT | os.O_RDWR) fo = os.fdopen(fd, 'rb+') m = mmap.mmap(-1, 4096) fo.readinto(m) But it worked for Python2. It also works for any other multiple of 4K. For e

[issue38167] O_DIRECT read fails with 4K mmap buffer

2019-09-13 Thread Paul
Change by Paul : -- keywords: +patch pull_requests: +15741 stage: -> patch review pull_request: https://github.com/python/cpython/pull/16130 ___ Python tracker <https://bugs.python.org/issu

[issue38167] O_DIRECT read fails with 4K mmap buffer

2019-09-13 Thread Paul
Change by Paul : -- pull_requests: +15742 pull_request: https://github.com/python/cpython/pull/16131 ___ Python tracker <https://bugs.python.org/issue38

[issue38167] O_DIRECT read fails with 4K mmap buffer

2019-09-13 Thread Paul
Paul added the comment: This is the platform that I'm working on as well as the failure. I have a review out for a fix. # uname -a Linux init129-13 3.10.0-957.el7.x86_64 x86_64 x86_64 x86_64 GNU/Linux # python3.7 directread.py Traceback (most recent call last): File "small.py&qu

[issue38167] O_DIRECT read fails with 4K mmap buffer

2019-10-04 Thread Paul
Paul added the comment: > I agree with Josh. If you want to use O_DIRECT, use an unbuffered file object > and be sure to issue reads of the right size. I do not believe an unbuffered file uses O_DIRECT. This is why I use os.open(fpath, os.O_DIRECT). > Also I'm curious: why

[issue38167] O_DIRECT read fails with 4K mmap buffer

2019-10-04 Thread Paul
Paul added the comment: > Problem is you follow it with: > > fo = os.fdopen(fd, 'rb+') > which introduces a Python level of buffering around the kernel unbuffered > file descriptor. You'd need to pass buffering=0 to make os.fdopen avoid > returning a buffe

[issue43512] Bug in isinstance(instance, cls) with cls being a protocol? (PEP 544)

2021-03-16 Thread Paul
New submission from Paul : The section "Subtyping relationships with other types" of PEP 544 states: "A concrete type X is a subtype of protocol P if and only if X implements all protocol members of P with compatible types. In other words, subtyping with respect to a pro

[issue43512] Bug in isinstance(instance, cls) with cls being a protocol? (PEP 544)

2021-03-16 Thread Paul
Paul added the comment: That's the very first issue I've reported in bugs.python.org and I'm completely new to the Python dev process: I have some further remarks at the issue (especially about consistency with the current treatment of Protocols vs. ABCs). Will they be read

[issue43512] Bug in isinstance(instance, cls) with cls being a protocol? (PEP 544)

2021-03-18 Thread Paul
Paul added the comment: Regarding "At runtime, protocol classes will be simple ABCs." (PEP 544): Unfortunately, this is currently not the case. Actually, there is an extra metaclass for protocols, solely to provide an __instancecheck__. https://github.com/python/cpython/blob/3.9/Lib

[issue43512] Bug in isinstance(instance, cls) with cls being a protocol? (PEP 544)

2021-03-18 Thread Paul
Paul added the comment: The authors of PEP 544 are Ivan Levkivskyi, Jukka Lehtosalo, and Ɓukasz Langa. I think their opinion should count. I can see "levkivskyi" in the noisy list, but not the other two. And don't see any possibility to add them. Who can add them? And if a

[issue43512] Bug in isinstance(instance, cls) with cls being a protocol? (PEP 544)

2021-03-18 Thread Paul
Paul added the comment: @kj Thank you, Ken! I'll try it on the list as advised by you! -- ___ Python tracker <https://bugs.python.org/issue43512> ___ ___

[issue43512] Bug in isinstance(instance, cls) with cls being a protocol? (PEP 544)

2021-03-18 Thread Paul
Change by Paul : -- nosy: +Jukka Lehtosalo, lukasz.langa ___ Python tracker <https://bugs.python.org/issue43512> ___ ___ Python-bugs-list mailing list Unsub

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

2021-05-05 Thread Paul
New submission from Paul : DETAILS: "[WinError 5] Access is denied" error is thrown when user attempts to use a different Registry hive other than HKEY_CURRENT_USER. The first example below will demonstrate that the code snippet works just fine and is implemented correctly. How

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

2021-05-05 Thread Paul
Paul added the comment: Clarification: User is a local admin on the machine, and UAC is disabled as well. I can also add, modify, and delete Registry entries in HKLM (or any other hive) by hand with no problem, so it is definitely not a permissions issue. I can also write, update, modify

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

2021-05-05 Thread Paul
Paul added the comment: *** Again, I am using a LOCAL ADMINISTRATIVE account. *** "Actually behind the scenes, winreg uses win32api which doesn't allow setting HKEY_LOCAL_MACHINE keys for unprivileged users. Running the application in admin mode may work because at that

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

2021-05-06 Thread Paul
Paul added the comment: Eryk: The whoami process check output shows that my account is in BUILTIN\Administrators, which proves that the account I am logged in as local Administrator permissions. As for the OpenKey method, it fails with [WinError 5] Access denied, exactly the same way my

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

2021-05-06 Thread Paul
Paul added the comment: @Eryk: GROUP INFORMATION - Group Name: Everyone Type: Well-known group SID:S-1-1-0 Attributes: Mandatory group, Enabled by default, Enabled group Group Name: NT AUTHORITY\Local account and member of Administrators group Type: Well

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

2021-05-06 Thread Paul
Paul added the comment: "The most easy way to do is right click on the application you're running the code from, click Run as Administrator and then run the code in that application. You'll not get any WinError. And also being in the Administrators group doesn't mean

[issue44046] When writing to the Registry using winreg, it currently allows you to write ONLY to HKEY_CURRENT_USERS.

2021-05-06 Thread Paul
Paul added the comment: "Here's something you should know about Windows, even if a local account is in the Administrators group, it still has restrictions on what it can do, it just has the power to elevate itself without requiring login credentials (VIA UAC prompts)." @W

[issue45432] sys.argv is processed strangely under Windows

2021-10-11 Thread Paul
New submission from Paul : here is my test file: ''' import sys print(sys.argv) ''' when I then try 'python test.py ^test' the ^ character is stripped away, this doesn't happen on Linux. This also doesn't happen if I put ^test in quotes (only

[issue45432] sys.argv is processed strangely under Windows

2021-10-11 Thread Paul
Paul added the comment: oh ok. thx -- ___ Python tracker <https://bugs.python.org/issue45432> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue40764] Conflation of Counter with Multiset

2020-05-25 Thread Paul
New submission from Paul : The collections docs state: "Several mathematical operations are provided for combining Counter objects to produce multisets (counters that have counts greater than zero)." I am surprised at the clear level of decision into conflating counters with mult

[issue31947] names=None case is not handled by EnumMeta._create_ method

2017-11-05 Thread Paul
New submission from Paul : It seems to me that this method should not have names=None default value in signature, because that case is not handled, nor is it described as a possible value in the docstring. Seems like maybe a copy and paste from __call__, which has basically same signature

[issue35215] Replacing CPython memory allocation

2018-11-12 Thread paul
New submission from paul : Hi all, I am trying to replace the version of malloc/free...etc with my own function suit. I am have issues with loading the initial library setup. I am looking for wisdom from the community as to why this may be the case. Facts: - i just grabbed the latest

[issue35215] Replacing CPython memory allocation

2018-11-12 Thread paul
paul added the comment: I suspect that this _bootstrap library is not being loaded correctly, and i can only assume that this is somehow because of my memory suit, but i am not really sure where to start hunting, as there is a lot of code. My goal is just to replace malloc. If there is a

[issue35215] Replacing CPython memory allocation

2018-11-12 Thread paul
paul added the comment: Hi guys, First, thanks for the prompt replies. @matrixise: If there is i can't find it, but i am happy to accept it as a possibility. Equally, maybe there is an assumption about memory in the cpython implementation somewhere that goes against my memory allo

[issue18291] codecs.open interprets space as line ends

2013-06-24 Thread Paul
New submission from Paul: I hope I am writing in the right place. When using codecs.open with UTF-8 encoding, it seems characters \x12, \x13, and \x14 are interpreted as end-of-line. Example code: >>> with open('unicodetest.txt', 'w') as f: >>> f.wr

[issue18291] codecs.open interprets space as line ends

2013-06-24 Thread Paul
Paul added the comment: Sorry for bringing that up as I suppose it is unrelated to the bug I am reporting, but you can an example file attached with timings. -- Added file: http://bugs.python.org/file30688/codecs-io-example.py ___ Python tracker

[issue18291] codecs.open interprets space as line ends

2013-06-25 Thread Paul
Paul added the comment: You're absolutely right. I tested it on another machine now, with Python 2.7.3 installed and it is actually twice as fast as codecs. Thanks. So I guess there is little interest in fixing codecs because io is the preferred package for reading unicode

[issue18291] codecs.open interprets space as line ends

2013-07-04 Thread Paul
Paul added the comment: Right, #7643 indeed seems to be exactly about the issue I described here (for as much as I know unicode which isn't all that much). So maybe they should be merged. The issue was closed March 2010, is that after 2.7.3 was released? By the way, where I wrote \x12,

[issue15565] pdb displays runt Exception strings

2012-08-06 Thread Paul
New submission from Paul: In Python 2.6, pdb doesn't show exception strings properly: #somecode.py import pdb pdb.set_trace() raise Exception('This is a message that contains a lot of characters and is very long indeed.') #terminal > somecode.py -> raise Exception(&#

[issue22517] BufferedRWpair doesn't clear weakrefs

2014-09-29 Thread paul
New submission from paul: # static void # bufferedrwpair_dealloc(rwpair *self) # { # _PyObject_GC_UNTRACK(self); # Py_CLEAR(self->reader); # Py_CLEAR(self->writer); # Py_CLEAR(self->dict); # Py_TYPE(self)->tp_free((PyObject *) self); # } # # Weakrefs to this ob

[issue22518] integer overflow in encoding unicode

2014-09-29 Thread paul
New submission from paul: # static PyObject * # unicode_encode_ucs1(PyObject *unicode, # const char *errors, # unsigned int limit) # { # ... # while (pos < size) { # ... # case 4: /* xmlcharrefrepl

[issue22519] integer overflow in computing byte's object representation

2014-09-29 Thread paul
New submission from paul: # PyBytes_Repr(PyObject *obj, int smartquotes) # { # PyBytesObject* op = (PyBytesObject*) obj; # 1 Py_ssize_t i, length = Py_SIZE(op); # size_t newsize, squotes, dquotes; # ... # # /* Compute size of output string */ # newsize = 3; /* b

[issue22520] integer overflow in computing unicode's object representation

2014-09-29 Thread paul
New submission from paul: # unicode_repr(PyObject *unicode) # { # ... # 1 isize = PyUnicode_GET_LENGTH(unicode); # idata = PyUnicode_DATA(unicode); # # /* Compute length of output, quote characters, and #maximum character */ # osize = 0; # ... # for (i = 0; i

[issue22517] BufferedRWpair doesn't clear weakrefs

2014-10-15 Thread paul
paul added the comment: Why did the type changed from security to crash? -- ___ Python tracker <http://bugs.python.org/issue22517> ___ ___ Python-bugs-list mailin

[issue22643] Integer overflow in case_operation

2014-10-15 Thread paul
New submission from paul: Crashes python 3.4.1. # Objects\unicodeobject.c # # static PyObject * # case_operation(PyObject *self, #Py_ssize_t (*perform)(int, void *, Py_ssize_t, Py_UCS4 *, Py_UCS4 *)) # { # PyObject *res = NULL; # Py_ssize_t length, newlength = 0

[issue23361] integer overflow in winapi_createprocess

2015-02-01 Thread paul
New submission from paul: winapi_createprocess takes env_mapping dictionary as a parameter, mapping variables to their env. values. Dictionary with pathologically large values will cause an integer overflow during computation of total space required to store all key-value pairs File

[issue23362] integer overflow in string translate

2015-02-01 Thread paul
New submission from paul: # Bug # --- # # PyObject * # _PyUnicode_TranslateCharmap(PyObject *input, # PyObject *mapping, # const char *errors) # { # ... # size = PyUnicode_GET_LENGTH(input); # ... # osize = size; # 1

[issue23363] integer overflow in itertools.permutations

2015-02-01 Thread paul
New submission from paul: # Bug # --- # # static PyObject * # permutations_new(PyTypeObject *type, PyObject *args, PyObject *kwds) # { # ... # 1 cycles = PyMem_Malloc(r * sizeof(Py_ssize_t)); # ... # for (i=0 ; i0, so we write well beyond the buffer's end # #

[issue23364] integer overflow in itertools.product

2015-02-01 Thread paul
New submission from paul: # Bug # --- # # static PyObject * # product_new(PyTypeObject *type, PyObject *args, PyObject *kwds) # { # ... # 1 nargs = (repeat == 0) ? 0 : PyTuple_GET_SIZE(args); # 2 npools = nargs * repeat; # # 3 indices = PyMem_Malloc(npools * sizeof(Py_ssize_t

[issue23365] integer overflow in itertools.combinations_with_replacement

2015-02-01 Thread paul
New submission from paul: # Bug # --- # # static PyObject * # cwr_new(PyTypeObject *type, PyObject *args, PyObject *kwds) # { # ... # 1 indices = PyMem_Malloc(r * sizeof(Py_ssize_t)); # ... # for (i=0 ; i0, so we write well beyond the buffer's end # #

[issue23366] integer overflow in itertools.combinations

2015-02-01 Thread paul
New submission from paul: # Bug # --- # # static PyObject * # combinations_new(PyTypeObject *type, PyObject *args, PyObject *kwds) # { # ... # # 1 indices = PyMem_Malloc(r * sizeof(Py_ssize_t)); # ... # # for (i=0 ; i0, so we write well beyond the buffer's end # #

[issue23367] integer overflow in unicodedata.normalize

2015-02-01 Thread paul
New submission from paul: # Bug # --- # # static PyObject* # unicodedata_normalize(PyObject *self, PyObject *args) # { # ... # if (strcmp(form, "NFKC") == 0) { # if (is_normalized(self, input, 1, 1)) { # Py_INCREF(input); # re

[issue23368] integer overflow in _PyUnicode_AsKind

2015-02-01 Thread paul
New submission from paul: # Bug # --- # # void* # _PyUnicode_AsKind(PyObject *s, unsigned int kind) # { # Py_ssize_t len; # ... # len = PyUnicode_GET_LENGTH(s); # ... # switch (kind) { # ... # case PyUnicode_4BYTE_KIND: # 1 result = PyMem_Malloc(len * sizeof

[issue23369] integer overflow in _json.encode_basestring_ascii

2015-02-01 Thread paul
New submission from paul: # static PyObject * # ascii_escape_unicode(PyObject *pystr) # { # ... # # input_chars = PyUnicode_GET_LENGTH(pystr); # input = PyUnicode_DATA(pystr); # kind = PyUnicode_KIND(pystr); # # /* Compute the output size */ # for (i = 0, output_size

[issue23364] integer overflow in itertools.product

2015-02-01 Thread paul
paul added the comment: Why do you think this test needs 16GiB? -- ___ Python tracker <http://bugs.python.org/issue23364> ___ ___ Python-bugs-list mailin

[issue23364] integer overflow in itertools.product

2015-02-02 Thread paul
paul added the comment: You mean 64bit? On 32 it'll overflow and that's the point. -- ___ Python tracker <http://bugs.python.org/issue23364> ___ ___

[issue23361] integer overflow in winapi_createprocess

2015-02-05 Thread paul
paul added the comment: ping -- ___ Python tracker <http://bugs.python.org/issue23361> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue23361] integer overflow in winapi_createprocess

2015-02-09 Thread paul
paul added the comment: ping -- ___ Python tracker <http://bugs.python.org/issue23361> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue23490] allocation (and overwrite) of a 0 byte buffer

2015-02-20 Thread paul
New submission from paul: # Bug # --- # # Py_UNICODE * # PyUnicode_AsUnicodeAndSize(PyObject *unicode, Py_ssize_t *size) # { # ... # #endif # wchar_t *w; # wchar_t *wchar_end; # # ... # 1 _PyUnicode_WSTR(unicode) = (wchar_t *) PyObject_MALLOC(sizeof(wchar_t

[issue23490] allocation (and overwrite) of a 0 byte buffer

2015-02-20 Thread paul
paul added the comment: And a nice error: Debug memory block at address p=0x805fc028: API 'o' 0 bytes originally requested The 3 pad bytes at p-3 are FORBIDDENBYTE, as expected. The 4 pad bytes at tail=0x805fc028 are not all FORBIDDENBYTE (0xfb): at tail+0: 0x0

[issue24407] Use after free in PyDict_merge

2015-06-08 Thread paul
New submission from paul: # PyDict_Merge: # # 1 for (i = 0, n = DK_SIZE(other->ma_keys); i < n; i++) { # ... # 3 entry = &other->ma_keys->dk_entries[i]; # ... # 2 if (insertdict(mp, entry->me_key, #

[issue24098] Multiple use after frees in obj2ast_* methods

2015-07-02 Thread paul
paul added the comment: ping -- ___ Python tracker <http://bugs.python.org/issue24098> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue24407] Use after free in PyDict_merge

2015-07-02 Thread paul
paul added the comment: ping -- ___ Python tracker <http://bugs.python.org/issue24407> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue24103] Use after free in xmlparser_setevents (1)

2015-07-02 Thread paul
paul added the comment: ping -- ___ Python tracker <http://bugs.python.org/issue24103> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue24104] Use after free in xmlparser_setevents (2)

2015-07-02 Thread paul
paul added the comment: ping -- ___ Python tracker <http://bugs.python.org/issue24104> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue24097] Use after free in PyObject_GetState

2015-07-02 Thread paul
paul added the comment: ping -- ___ Python tracker <http://bugs.python.org/issue24097> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue24407] Use after free in PyDict_merge

2015-07-03 Thread paul
paul added the comment: ping -- ___ Python tracker <http://bugs.python.org/issue24407> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue24103] Use after free in xmlparser_setevents (1)

2015-07-03 Thread paul
paul added the comment: ping -- ___ Python tracker <http://bugs.python.org/issue24103> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue24104] Use after free in xmlparser_setevents (2)

2015-07-03 Thread paul
paul added the comment: ping -- ___ Python tracker <http://bugs.python.org/issue24104> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue24098] Multiple use after frees in obj2ast_* methods

2015-07-03 Thread paul
paul added the comment: ping -- ___ Python tracker <http://bugs.python.org/issue24098> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue24407] Use after free in PyDict_merge

2015-07-04 Thread paul
paul added the comment: ping -- ___ Python tracker <http://bugs.python.org/issue24407> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue24683] Type confusion in json encoding

2015-07-22 Thread paul
New submission from paul: on-35dm-i386-linux-gnu.so`encoder_listencode_list(s=0xb6f90394, acc=0xbfc42c28, seq=0xb6f2361c, indent_level=1) + 655 at _json.c:1800 # frame #2: 0xb6e4366d _json.cpython-35dm-i386-linux-gnu.so`encoder_listencode_obj(s=0xb6f90394, acc=0xbfc42c28, obj=0xb6f2361c

[issue24684] Type confusion in socket module

2015-07-22 Thread paul
New submission from paul: eck(idna)); # (gdb) # # Program received signal SIGABRT, Aborted. # 0xb77a6d4c in __kernel_vsyscall () # # "host" argument can be set to a subclass of unicode with a custom "encode" # method. "encode" returns unexpected type. assert is

[issue24683] Type confusion in json encoding

2015-07-22 Thread paul
paul added the comment: Sorry, I uploaded a test case. -- ___ Python tracker <http://bugs.python.org/issue24683> ___ ___ Python-bugs-list mailing list Unsub

[issue24683] Type confusion in json encoding

2015-07-22 Thread paul
Changes by paul : Added file: http://bugs.python.org/file39975/json_markers.py ___ Python tracker <http://bugs.python.org/issue24683> ___ ___ Python-bugs-list mailin

[issue24684] socket.getaddrinfo(host) doesn't ensure that host.encode() returns a byte string

2015-07-22 Thread paul
paul added the comment: @haypo: I'd be happy to implement all my fuzzer ideas if my bugs were patched in a timely manner. At this moment I have multiple bugs submitted over 2 months ago, which still aren't patched. Without patches, hackerone won't accept these issues, so my in

[issue24683] Type confusion in json encoding

2015-07-27 Thread paul
paul added the comment: resolution: not a bug ^ because of private API? -- ___ Python tracker <http://bugs.python.org/issue24683> ___ ___ Python-bugs-list mailin

[issue25143] 3.5 install fails poorly on Windows XP

2015-09-16 Thread Paul
New submission from Paul: Running the installer on an unsupported system (such as Windows XP)should fail gracefully and not just leave the user hanging. https://mail.python.org/pipermail/python-list/2015-September/696789.html -- components: Installation messages: 250852 nosy: pwat

[issue25143] 3.5 install fails poorly on Windows XP

2015-09-16 Thread Paul
Paul added the comment: Installing on an unsupported platform should fail gracefully. https://mail.python.org/pipermail/python-list/2015-September/696789.html -- ___ Python tracker <http://bugs.python.org/issue25

[issue24683] Type confusion in json encoding

2016-01-26 Thread paul
paul added the comment: Proof of EIP control. -- Added file: http://bugs.python.org/file41719/eip.py ___ Python tracker <http://bugs.python.org/issue24

[issue24683] Type confusion in json encoding

2016-01-26 Thread paul
paul added the comment: GDB dump of running ./python eip.py ___ eax:37A317DD ebx:B7A54268 ecx:BFFFE22C edx:11223344 eflags:00010217 esi:B7A61060 edi:B7AA6714 esp:BFFFE20C ebp:B7A317DC eip:11223344

[issue24683] Type confusion in json encoding

2016-02-05 Thread paul
paul added the comment: Can you try on 2.7 branch? -- ___ Python tracker <http://bugs.python.org/issue24683> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue24683] Type confusion in json encoding

2016-02-05 Thread paul
paul added the comment: Sorry, I wasn't clear enough. This POC is a proof that the original bug can be used for EIP control. I just checked and it works as advertised on 2.7 revision: https://hg.python.org/cpython/rev/2d39777f3477 - it's a parent of https://hg.python.org/c

[issue24091] Use after free in Element.extend (1)

2015-05-01 Thread paul
New submission from paul: # 1055for (i = 0; i < seqlen; i++) { # (gdb) n # 1056PyObject* element = PySequence_Fast_GET_ITEM(seq, i); # (gdb) n # 1057if (!PyObject_IsInstance(element, (PyObject *)&Element_Type)) { # (gdb) print *element # $19 = {_

[issue24092] Use after free in Element.extend (2)

2015-05-01 Thread paul
New submission from paul: # Program received signal SIGSEGV, Segmentation fault. # 0x4063cf19 in element_extend (self=0x405ddf74, args=([],)) at /home/p/Python-3.4.1/Modules/_elementtree.c:1056 # 1056PyObject* element = PySequence_Fast_GET_ITEM(seq, i); # (gdb) print i # $3 = 1337

[issue24093] Use after free in Element.remove

2015-05-01 Thread paul
New submission from paul: # Program received signal SIGABRT, Aborted. # 0x40022424 in __kernel_vsyscall () # (gdb) bt # #0 0x40022424 in __kernel_vsyscall () # #1 0x400bb1df in raise () from /lib/i386-linux-gnu/libc.so.6 # #2 0x400be825 in abort () from /lib/i386-linux-gnu/libc.so.6 # #3

[issue24094] Use after free during json encoding (PyType_IsSubtype)

2015-05-01 Thread paul
New submission from paul: # Breakpoint 1, encoder_listencode_dict (s=0x405b23fc, acc=0xbfc4038c, dct=, indent_level=0) # at /home/p/Python-3.4.1/Modules/_json.c:1540 # 1540items = PyMapping_Keys(dct); # (gdb) n # 1541if (items == NULL) # (gdb) print *items # $1

[issue24095] Use after free during json encoding a dict (2)

2015-05-01 Thread paul
New submission from paul: # Breakpoint 1, encoder_listencode_dict (s=0x405b23fc, acc=0xbfaf96ec, dct=, indent_level=0) # at /home/p/Python-3.4.1/Modules/_json.c:1540 # 1540items = PyMapping_Keys(dct); # (gdb) print *items # $1 = {_ob_next = 0x4059029c, _ob_prev = 0x405c8ab4

[issue24096] Use after free during json encoding a dict (3)

2015-05-01 Thread paul
New submission from paul: # Program received signal SIGSEGV, Segmentation fault. # 0x40036740 in encoder_listencode_dict (s=0x405b43fc, acc=0xbf86438c, dct=, indent_level=0) # at /home/p/Python-3.4.1/Modules/_json.c:1557 # 1557PyList_SET_ITEM(items, i, item); # (gdb) print

[issue24096] Use after free in get_filter

2015-05-01 Thread paul
paul added the comment: # Program received signal SIGSEGV, Segmentation fault. # 0x080f2c17 in PyObject_GetAttr (v=, name='match') at Objects/object.c:872 # 872 if (tp->tp_getattro != NULL) # (gdb) bt # #0 0x080f2c17 in PyObject_GetAttr (v=, name='match') at Ob

[issue24097] Use after free in PyObject_GetState

2015-05-01 Thread paul
New submission from paul: # Program received signal SIGSEGV, Segmentation fault. # 0x080f27b2 in PyObject_Hash (v=) at Objects/object.c:746 # 746 if (tp->tp_hash != NULL) # (gdb) bt # #0 0x080f27b2 in PyObject_Hash (v=) at Objects/object.c:746 # #1 0x080e1717 in PyDict_SetItem

[issue24098] Multiple use after frees in obj2ast_* methods

2015-05-01 Thread paul
New submission from paul: # 3617for (i = 0; i < len; i++) { # (gdb) print *(PyListObject*)tmp # $1 = {ob_base = {ob_base = {_ob_next = 0x4056f8f4, _ob_prev = 0x4057329c, ob_refcnt = 2, ob_type = 0x830e1c0 }, # ob_size = 1337}, ob_item = 0x8491ae0, allocated = 1432} # (

[issue24100] Use after free in siftdown (2)

2015-05-01 Thread paul
New submission from paul: # _siftdown(PyListObject *heap, Py_ssize_t startpos, Py_ssize_t pos) # ... # while (pos > startpos){ # parentpos = (pos - 1) >> 1; # parent = PyList_GET_ITEM(heap, parentpos); # 1 cmp = PyObject_RichCompareBool(newitem, pare

[issue24101] Use after free in siftup

2015-05-01 Thread paul
New submission from paul: # Breakpoint 1, _siftup (heap=0x4056b344, pos=65534) at /home/p/Python-3.4.1/Modules/_heapqmodule.c:121 # warning: Source file is more recent than executable. # 121 Py_DECREF(PyList_GET_ITEM(heap, pos)); # (gdb) print *heap->ob_item[pos] # $1 = {_ob_n

[issue24102] Multiple type confusions in unicode error handlers

2015-05-01 Thread paul
New submission from paul: # Breakpoint 1, PyUnicodeEncodeError_GetEnd (exc=, end=0xbf9e8f7c) at Objects/exceptions.c:1643 # 1643PyObject *obj = get_unicode(((PyUnicodeErrorObject *)exc)->object, # (gdb) s # get_unicode (attr=, name=0x82765ea "object") at Objects/exce

[issue24103] Use after free in xmlparser_setevents (1)

2015-05-01 Thread paul
New submission from paul: # xmlparser_setevents(XMLParserObject *self, PyObject* args) # { # ... # /* clear out existing events */ # Py_CLEAR(target->start_event_obj); # 1 Py_CLEAR(target->end_event_obj); # Py_CLEAR(target->start_ns_event_obj); # Py_CLE

[issue24104] Use after free in xmlparser_setevents (2)

2015-05-01 Thread paul
New submission from paul: # Program received signal SIGSEGV, Segmentation fault. # 0x4068565c in xmlparser_setevents (self=0x4064b13c, args=([], [])) # at /home/p/Python-3.4.1/Modules/_elementtree.c:3562 # 3562if (PyUnicode_Check(event_name_obj)) { # (gdb) print *event_name_obj

[issue24099] Use after free in siftdown (1)

2015-05-01 Thread paul
New submission from paul: # _siftdown(PyListObject *heap, Py_ssize_t startpos, Py_ssize_t pos) # ... # newitem = PyList_GET_ITEM(heap, pos); # Py_INCREF(newitem); # /* Follow the path to the root, moving parents down until finding #a place newitem fits. */ # while

[issue24105] Use after free during json encoding a dict (3)

2015-05-01 Thread paul
New submission from paul: # Program received signal SIGSEGV, Segmentation fault. # 0x40036740 in encoder_listencode_dict (s=0x405b43fc, acc=0xbf86438c, dct=, indent_level=0) # at /home/p/Python-3.4.1/Modules/_json.c:1557 # 1557PyList_SET_ITEM(items, i, item); # (gdb) print

[issue24096] Use after free in get_filter

2015-05-01 Thread paul
Changes by paul : Removed file: http://bugs.python.org/file39246/poc_enc_dict3.py ___ Python tracker <http://bugs.python.org/issue24096> ___ ___ Python-bugs-list mailin

[issue24096] Use after free in get_filter

2015-05-01 Thread paul
paul added the comment: Issue for poc_enc_dict3.py is here: https://bugs.python.org/issue24105 Please ignore first and third message. -- ___ Python tracker <http://bugs.python.org/issue24

[issue24105] Use after free during json encoding a dict (3)

2015-05-01 Thread paul
paul added the comment: You want multiple bugs in the same module grouped in one issue? -- ___ Python tracker <http://bugs.python.org/issue24105> ___ ___ Pytho

  1   2   3   4   5   6   7   8   9   10   >