Re: [Python-Dev] Fuzzing bugs: most bugs are closed

2008-08-10 Thread Victor Stinner
Guido van Rossum wrote: The underscore at the beginning of _sre clearly indicates that the module is not recommended for direct consumption, IMO. Even the functions that don't themselves start with an underscore... I've written a re-code verifier for the Google App Engine ... which means tha

Re: [Python-Dev] Fuzzing bugs: most bugs are closed

2008-08-01 Thread Guido van Rossum
On Wed, Jul 30, 2008 at 11:17 AM, Guido van Rossum <[EMAIL PROTECTED]> wrote: > On Mon, Jul 21, 2008 at 10:41 AM, A.M. Kuchling <[EMAIL PROTECTED]> wrote: >> On Mon, Jul 21, 2008 at 03:53:18PM +, Antoine Pitrou wrote: >>> The underscore at the beginning of _sre clearly indicates that the module

Re: [Python-Dev] Fuzzing bugs: most bugs are closed

2008-07-30 Thread Guido van Rossum
On Mon, Jul 21, 2008 at 10:41 AM, A.M. Kuchling <[EMAIL PROTECTED]> wrote: > On Mon, Jul 21, 2008 at 03:53:18PM +, Antoine Pitrou wrote: >> The underscore at the beginning of _sre clearly indicates that the module is >> not recommended for direct consumption, IMO. Even the functions that don't

Re: [Python-Dev] Fuzzing bugs: most bugs are closed

2008-07-21 Thread A.M. Kuchling
yOn Mon, Jul 21, 2008 at 03:53:18PM +, Antoine Pitrou wrote: > The underscore at the beginning of _sre clearly indicates that the module is > not recommended for direct consumption, IMO. Even the functions that don't > themselves start with an underscore... Sure, but if someone is trying to

Re: [Python-Dev] Fuzzing bugs: most bugs are closed

2008-07-21 Thread Antoine Pitrou
Victor Stinner haypocalc.com> writes: > > Le Monday 21 July 2008 15:33:19 A.M. Kuchling, vous avez écrit : > > On Sun, Jul 20, 2008 at 10:45:39PM +0200, Victor Stinner wrote: > > > Hum... how can I say it? It's trivial to crash _sre So I blacklisted > > > _sre.compile() in my fuzzer. > > > > We

Re: [Python-Dev] Fuzzing bugs: most bugs are closed

2008-07-21 Thread Victor Stinner
Le Monday 21 July 2008 15:33:19 A.M. Kuchling, vous avez écrit : > On Sun, Jul 20, 2008 at 10:45:39PM +0200, Victor Stinner wrote: > > Hum... how can I say it? It's trivial to crash _sre :-) So I blacklisted > > _sre.compile() in my fuzzer. > > We should certainly try to fix those issues, then; peo

Re: [Python-Dev] Fuzzing bugs: most bugs are closed

2008-07-21 Thread A.M. Kuchling
On Sun, Jul 20, 2008 at 10:45:39PM +0200, Victor Stinner wrote: > Hum... how can I say it? It's trivial to crash _sre :-) So I blacklisted > _sre.compile() in my fuzzer. We should certainly try to fix those issues, then; people usually assume the re module is safe for use inside a sandbox and pro

Re: [Python-Dev] Fuzzing bugs: most bugs are closed

2008-07-21 Thread M.-A. Lemburg
On 2008-07-20 22:45, Victor Stinner wrote: Le Saturday 19 July 2008 21:52:09 A.M. Kuchling, vous avez écrit : Excellent work! Another fruitful area for fuzzing might be the miniature virtual machine used by the re module. It's possible to import _sre and call the compile() function directly (s

Re: [Python-Dev] Fuzzing bugs: most bugs are closed

2008-07-20 Thread Steve Holden
Victor Stinner wrote: Le Saturday 19 July 2008 21:52:09 A.M. Kuchling, vous avez écrit : Excellent work! Another fruitful area for fuzzing might be the miniature virtual machine used by the re module. It's possible to import _sre and call the compile() function directly (see the end of Lib/sre

Re: [Python-Dev] Fuzzing bugs: most bugs are closed

2008-07-20 Thread Victor Stinner
Le Saturday 19 July 2008 21:52:09 A.M. Kuchling, vous avez écrit : > Excellent work! Another fruitful area for fuzzing might be the > miniature virtual machine used by the re module. It's possible to > import _sre and call the compile() function directly (see the end of > Lib/sre_compile.py for h

Re: [Python-Dev] Fuzzing bugs: most bugs are closed

2008-07-20 Thread Victor Stinner
Hi, Le Saturday 19 July 2008 15:14:44, vous avez écrit : > Thank you Victor - I didn't want to change any underlying > multiprocessing code until we had the test suite in a better state > (which we do now) (...) > > One suggestion would be to include tests to prove the bugs is fixed if > possible

Re: [Python-Dev] Fuzzing bugs: most bugs are closed

2008-07-19 Thread Jesse Noller
On Sat, Jul 19, 2008 at 7:23 AM, Victor Stinner <[EMAIL PROTECTED]> wrote: > Hi, > > I filled 14 issues about bugs found by fuzzing (see my other email "Play with > fuzzing" for more informations). Most bugs are now closed, cool :-) Last > bugs: > > > == Trivial open bugs == > > segfault on locale.

[Python-Dev] Fuzzing bugs: most bugs are closed

2008-07-19 Thread Victor Stinner
Hi, I filled 14 issues about bugs found by fuzzing (see my other email "Play with fuzzing" for more informations). Most bugs are now closed, cool :-) Last bugs: == Trivial open bugs == segfault on locale.gettext(None) - http://bugs.python.org/issue3302 - attached patch is trivial: fix the PyA