[issue24522] Integer overflow in _json_encode_unicode leads to crash (heap-buffer-overflow)

2015-06-28 Thread Arfrever Frehtes Taifersar Arahesis
Changes by Arfrever Frehtes Taifersar Arahesis arfrever@gmail.com: -- nosy: +Arfrever ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue24522 ___

[issue24522] Integer overflow in _json_encode_unicode leads to crash (heap-buffer-overflow)

2015-06-27 Thread Benjamin Peterson
New submission from Benjamin Peterson: Reported by Brendon Tiszka on the security list: # static PyObject * # escape_unicode(PyObject *pystr) # { # /* Take a PyUnicode pystr and return a new escaped PyUnicode */ # Py_ssize_t i; # Py_ssize_t input_chars; # Py_ssize_t output_size;

[issue24522] Integer overflow in _json_encode_unicode leads to crash (heap-buffer-overflow)

2015-06-27 Thread Roundup Robot
Roundup Robot added the comment: New changeset 0540e14c4b64 by Benjamin Peterson in branch '3.5': prevent integer overflow in escape_unicode (closes #24522) https://hg.python.org/cpython/rev/0540e14c4b64 New changeset fc799b2edf21 by Benjamin Peterson in branch 'default': merge 3.5 (#24522)