[issue24802] PyFloat_FromString Buffer Over-read

2015-08-06 Thread Eric V. Smith
Changes by Eric V. Smith e...@trueblade.com: -- nosy: +eric.smith ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue24802 ___ ___ Python-bugs-list

[issue24802] PyFloat_FromString Buffer Over-read

2015-08-06 Thread Mark Dickinson
Changes by Mark Dickinson dicki...@gmail.com: -- nosy: +mark.dickinson ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue24802 ___ ___

[issue24802] PyFloat_FromString Buffer Over-read

2015-08-05 Thread John Leitch
New submission from John Leitch: Python suffers from a buffer over-read in PyFloat_FromString() that is caused by the incorrect assumption that buffers returned by PyObject_GetBuffer() are null-terminated. This could potentially result in the disclosure of adjacent memory. PyObject *

[issue24802] PyFloat_FromString Buffer Over-read

2015-08-05 Thread John Leitch
John Leitch added the comment: Attaching repro -- Added file: http://bugs.python.org/file40133/PyFloat_FromString_Buffer_Over-read.py ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue24802 ___

[issue24802] PyFloat_FromString Buffer Over-read

2015-08-05 Thread Serhiy Storchaka
Changes by Serhiy Storchaka storch...@gmail.com: -- type: behavior - crash ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue24802 ___ ___

[issue24802] PyFloat_FromString Buffer Over-read

2015-08-05 Thread Serhiy Storchaka
Changes by Serhiy Storchaka storch...@gmail.com: -- assignee: - serhiy.storchaka components: +Interpreter Core nosy: +serhiy.storchaka stage: - patch review type: security - behavior versions: +Python 2.7, Python 3.4, Python 3.6 ___ Python tracker