zlib vulnerabilities and python

Fredrik Lundh fredrik at pythonware.com
Wed Mar 13 03:21:30 EST 2002


Robin Becker wrote:

> Does the recent zlib double free vulnerability
>
> http://news.com.com/2100-1001-857008.html
>
> impact zlib.pyd?

only if the guys implementing your C library decided to inter-
pret "undefined behaviour" as "force the operating system to
run code designed to take over the computer".

dunno about MSVC; the CRT documentation only says that
things like this may "cause errors".

</F>





More information about the Python-list mailing list