[issue25019] xmlparse_setattro() Type Confusion

2015-09-18 Thread Arfrever Frehtes Taifersar Arahesis
Changes by Arfrever Frehtes Taifersar Arahesis : -- nosy: +Arfrever ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscri

[issue25019] xmlparse_setattro() Type Confusion

2015-09-07 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Thank you for your contribution John. The committed patch slightly differs from the proposed patch. Error message now is the same as in setattr() and general __setattr__(). Tests are moved to existing test class for testing of attribute setting. Improved tes

[issue25019] xmlparse_setattro() Type Confusion

2015-09-07 Thread Roundup Robot
Roundup Robot added the comment: New changeset ff2c4f281720 by Serhiy Storchaka in branch '3.4': Issue #25019: Fixed a crash caused by setting non-string key of expat parser. https://hg.python.org/cpython/rev/ff2c4f281720 New changeset 6006231dcaae by Serhiy Storchaka in branch '3.5': Issue #250

[issue25019] xmlparse_setattro() Type Confusion

2015-09-07 Thread Serhiy Storchaka
Changes by Serhiy Storchaka : -- assignee: -> serhiy.storchaka nosy: +serhiy.storchaka stage: -> patch review ___ Python tracker ___ ___

[issue25019] xmlparse_setattro() Type Confusion

2015-09-07 Thread John Leitch
Changes by John Leitch : -- nosy: +christian.heimes ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mai

[issue25019] xmlparse_setattro() Type Confusion

2015-09-07 Thread John Leitch
Changes by John Leitch : -- nosy: +brycedarling ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.py

[issue25019] xmlparse_setattro() Type Confusion

2015-09-07 Thread John Leitch
Changes by John Leitch : -- keywords: +patch Added file: http://bugs.python.org/file40395/xmlparse_setattro_Type_Confusion.patch ___ Python tracker ___ _

[issue25019] xmlparse_setattro() Type Confusion

2015-09-07 Thread John Leitch
New submission from John Leitch: Python 3.4 and 3.5 suffer from a vulnerability caused by the behavior of the xmlparse_setattro() function. When called, the function uses the provided name argument in several conditional statements which assume that the name argument is a string. However, if