[issue28275] LZMADecompressor.decompress Use After Free

Martin Panter report at bugs.python.org
Wed Sep 28 22:34:28 EDT 2016


Martin Panter added the comment:

Here is a patch to fix the corresponding bug in the bzip decompressor. I will try to commit it soon if there are no objections.

For the record, these bugs were introduced with the max_length support in Issue 15955. The bzip code was modelled after the LZMA code.

----------
assignee: serhiy.storchaka -> martin.panter
nosy: +martin.panter
status: closed -> open
Added file: http://bugs.python.org/file44873/bzip-failure.patch

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue28275>
_______________________________________


More information about the Python-bugs-list mailing list