[issue24917] time_strftime() Buffer Over-read

Steve Dower report at bugs.python.org
Sun Sep 6 21:50:41 CEST 2015


Steve Dower added the comment:

New patch attached that just breaks out of the scanning loop and lets the system CRT handle invalid format strings. Fixes the condition that was suppressing some errors on Windows.

Also fixed the PEP 7 issues around the changed code (I believe). No new test because the crash cannot be reliably reproduced and the expected results vary dramatically between platforms.

The two if/break lines in the AIX branch should also be applied to 3.4 to prevent crashes. The rest of the fix (including the PEP 7 fixes) should not.

----------
versions:  -Python 3.2, Python 3.3
Added file: http://bugs.python.org/file40383/24917_4.patch

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue24917>
_______________________________________


More information about the Python-bugs-list mailing list