[issue14579] Vulnerability in the utf-16 decoder after error handling

Serhiy Storchaka report at bugs.python.org
Tue Apr 24 14:35:06 CEST 2012


Serhiy Storchaka <storchaka at gmail.com> added the comment:

> I think the same issue also applies to the ASCII decoder in 3.3.

No, the ASCII decoder is not affected by this vulnerability. In a loop,
in which unicode_decode_call_errorhandler is called, do not use any
cached and not-updatable data.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue14579>
_______________________________________


More information about the Python-bugs-list mailing list