Christian Heimes added the comment:

MSG_TRUNC literally causes a buffer overflow. In the example sock_recv() and 
friends only allocate a buffer of size 1 on the heap. With MSG_TRUNC recv() 
ignores the maximum size and writes beyond the buffer. We cannot recover from a 
buffer overflow because the overflow might have damanged other data structures. 
Instead Python should detect the problem and forcefully abort() the process 
with Py_FatalError().

----------
priority: normal -> critical
versions: +Python 3.7

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue24933>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to