[issue27235] Heap overflow occurred due to the int overflow (Python-2.7.11/Modules/posixmodule.c)

Changes by Rustemzade Mehemmed <oke...@gmail.com>: -- components: +Interpreter Core versions: +Python 2.7 ___ Python tracker <rep...@bugs.python.org> <http://bugs.python

[issue27235] Heap overflow occurred due to the int overflow (Python-2.7.11/Modules/posixmodule.c)

Changes by Rustemzade Mehemmed <oke...@gmail.com>: -- type: -> security ___ Python tracker <rep...@bugs.python.org> <http://bugs.python.org/issue27235> ___ _

[issue27235] Heap overflow occurred due to the int overflow (Python-2.7.11/Modules/posixmodule.c)

Changes by Rustemzade Mehemmed <oke...@gmail.com>: -- title: Heap overflow occurred due to the int overflow -> Heap overflow occurred due to the int overflow (Python-2.7.11/Modules/posixmodule.c) ___ Python tracker <rep...@bugs.pytho

[issue27235] Heap overflow occurred due to the int overflow

New submission from Rustemzade Mehemmed: I have tested this vulnerability on the Python 2.7 and it absolutely affected :). Integer overflow produce in posix_fdopen function. If an attacker sent fdopen mode value larger than max integer value (2*32) to fdopen after integer overflow occurred