[issue27291] two heap corruption issue

STINNER Victor added the comment: Hi, corrupted .pyc files are known to be abel to crash Python. What is the point of your bug report? If you are able to execute untrusted .pyc, you can already execute arbitrary code, no? IMHO we should document the limitation of the security of CPython. --

[issue27291] two heap corruption issue

Park Alex added the comment: all of .pyc files had been altered by fuzzer. original py code is following: $ cat helloworld.py def hello(s=0x4142434445464748): print s if type(s) == str: print s.encode('hex') print repr(s) else: s = str(s) print len(s) <<

[issue27291] two heap corruption issue

Serhiy Storchaka added the comment: poc.zip contains only precompiled files. Could you please provide source files? -- ___ Python tracker ___

[issue27291] two heap corruption issue

Changes by Raymond Hettinger : -- nosy: +haypo, rhettinger, serhiy.storchaka, stutzbach ___ Python tracker ___ ___ Python-bugs-list ma

[issue27291] two heap corruption issue

New submission from Park Alex: Hello, I would like to report two heap corruption issue. Test environment: python ersion: python 2.7.11+ hg id: d858eadf2602 (2.7) compile: clang with ASAN OS: ubuntu x86_64 One is heap-buffer-overflow, the other is heap-user-after-free. All of samples are atta