[issue18684] Pointers point out of array bound in _sre.c
Changes by Serhiy Storchaka storch...@gmail.com: -- resolution: - fixed stage: commit review - resolved status: open - closed ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue18684 ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue18684] Pointers point out of array bound in _sre.c
Roundup Robot added the comment: New changeset 0007031e0452 by Serhiy Storchaka in branch '2.7': Issue #18684: Fixed reading out of the buffer in the re module. https://hg.python.org/cpython/rev/0007031e0452 New changeset 389795b7c703 by Serhiy Storchaka in branch '3.4': Issue #18684: Fixed reading out of the buffer in the re module. https://hg.python.org/cpython/rev/389795b7c703 New changeset 5adf995d443f by Serhiy Storchaka in branch '3.5': Issue #18684: Fixed reading out of the buffer in the re module. https://hg.python.org/cpython/rev/5adf995d443f New changeset bb9fc884a838 by Serhiy Storchaka in branch 'default': Issue #18684: Fixed reading out of the buffer in the re module. https://hg.python.org/cpython/rev/bb9fc884a838 -- nosy: +python-dev ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue18684 ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue18684] Pointers point out of array bound in _sre.c
Serhiy Storchaka added the comment: May be issue24566 has a reproducer, but not having Windows I can't test this. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue18684 ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue18684] Pointers point out of array bound in _sre.c
Mark Lawrence added the comment: The reproducer from issue24566 consistently crashed the code. Applied the patch from here and couldn't reproduce the problem. Then ran test_re for both 32 and 64 bit debug and release builds with no problems. -- nosy: +BreamoreBoy ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue18684 ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue18684] Pointers point out of array bound in _sre.c
Serhiy Storchaka added the comment: Thank you Mark. -- stage: patch review - commit review versions: +Python 2.7, Python 3.4, Python 3.6 ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue18684 ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue18684] Pointers point out of array bound in _sre.c
Serhiy Storchaka added the comment: Here is recent patch. -- versions: +Python 3.5 -Python 3.4 Added file: http://bugs.python.org/file38637/sre_ptr_out_of_bounds_4.patch ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue18684 ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue18684] Pointers point out of array bound in _sre.c
Changes by Serhiy Storchaka storch...@gmail.com: Removed file: http://bugs.python.org/file38637/sre_ptr_out_of_bounds_4.patch ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue18684 ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue18684] Pointers point out of array bound in _sre.c
Changes by Serhiy Storchaka storch...@gmail.com: Added file: http://bugs.python.org/file38638/sre_ptr_out_of_bounds_4.patch ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue18684 ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue18684] Pointers point out of array bound in _sre.c
Changes by STINNER Victor victor.stin...@gmail.com: -- nosy: +haypo ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue18684 ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue18684] Pointers point out of array bound in _sre.c
Serhiy Storchaka added the comment: Patch updated to tip (the code was changed since issue17998). It no more uses division. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue18684 ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue18684] Pointers point out of array bound in _sre.c
Serhiy Storchaka added the comment: Because currently there is no way to test behavior change of this patch (besides rollback a patch committed in issue17998) I think that it worth to apply only in 3.4. When the bug will be reproduced we could backport it to maintenance releases. -- versions: -Python 2.7, Python 3.3 ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue18684 ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue18684] Pointers point out of array bound in _sre.c
Changes by Serhiy Storchaka storch...@gmail.com: -- assignee: - serhiy.storchaka keywords: +needs review ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue18684 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue18684] Pointers point out of array bound in _sre.c
Changes by Arfrever Frehtes Taifersar Arahesis arfrever@gmail.com: -- nosy: +Arfrever ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue18684 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue18684] Pointers point out of array bound in _sre.c
New submission from Serhiy Storchaka: In _sre.c pointers can point out of boundaries of array. This is an undefined behavior and is one of causes of a bug in issue17998 (end-ptr can be negative). The proposed patch change code to check if pointers will point out of boundaries before their changing. -- components: Regular Expressions files: sre_ptr_out_of_bounds.patch keywords: patch messages: 194661 nosy: ezio.melotti, mrabarnett, serhiy.storchaka priority: normal severity: normal stage: patch review status: open title: Pointers point out of array bound in _sre.c type: behavior versions: Python 2.7, Python 3.3, Python 3.4 Added file: http://bugs.python.org/file31197/sre_ptr_out_of_bounds.patch ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue18684 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
