[issue34656] [CVE-2018-20406] memory exhaustion in Modules/_pickle.c:1393

Larry Hastings report at bugs.python.org
Mon Feb 25 19:41:36 EST 2019


Larry Hastings <larry at hastings.org> added the comment:


New changeset ef33dd6036aafbd3f06c1d56e2b1a81dae3da63c by larryhastings (Victor Stinner) in branch '3.5':
closes bpo-34656: Avoid relying on signed overflow in _pickle memos. (GH-9261) (#11869)
https://github.com/python/cpython/commit/ef33dd6036aafbd3f06c1d56e2b1a81dae3da63c


----------
resolution:  -> fixed
stage: patch review -> resolved
status: open -> closed

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue34656>
_______________________________________


More information about the Python-bugs-list mailing list