[issue2587] PyString_FromStringAndSize() to be considered unsafe

2008-04-10 Thread David Remahl
Changes by David Remahl <[EMAIL PROTECTED]>: -- nosy: +chmod007 __ Tracker <[EMAIL PROTECTED]> <http://bugs.python.org/issue2587> __ ___ Python-bugs

[issue2586] Integer signedness bugs in zlib modules

2008-04-10 Thread David Remahl
David Remahl <[EMAIL PROTECTED]> added the comment: I submit that a check for negative values (non-assert-based) should be added to PyString_FromStringAndSize(). This API is called from many, many places, and in several cases the operand could probably be negative. It should raise an ov

[issue1179] [CVE-2007-4965] Integer overflow in imageop module

2008-04-07 Thread David Remahl
David Remahl <[EMAIL PROTECTED]> added the comment: Uploading patch that addresses the test cases above. It applies on top of nevyn’s latest patch. Added file: http://bugs.python.org/file9975/python-2.5-int-overflow-2.patch __ Tracker <[EMAIL PROTECTE

[issue1179] [CVE-2007-4965] Integer overflow in imageop module

2008-03-28 Thread David Remahl
David Remahl <[EMAIL PROTECTED]> added the comment: The following test cases still cause bus errors with the patch applied: import imageop; imageop.rgb82rgb('A'*(2**30), 32768, 32768) import imageop; imageop.grey2rgb('A'*(2**30), 32768, 32768)