William Bowling added the comment:
> Is this still reproducible? On master (Python 3.8) with a debug build it
> throws a SyntaxError. I don't have Python 3.5 installed to check this though
Looks like it's fixed in master and 3.6.6 but still happening in
William Bowling added the comment:
Also a very similar source causes a slightly different crash
(heap-buffer-overflow instead of heap-use-after-free):
./python -c 'with open("vuln2.py", "wb") as f:
f.write(b"\x61\x73\x00\x0a\x79\x6e\x63\x5c\x0a\x00\x0d\xdd")'
.
New submission from William Bowling:
Similar to https://bugs.python.org/issue25388 the following causes a crash on
3.5.1 and the latest 3.5 branch:
./python -c 'with open("vuln.py", "wb") as f:
f.write(b"\x61\x73\x00\x0a\x79\x6e\x63\x5c\x0a\xef")'
./python vu
