[issue5939] Ensure that PyCapsule_GetPointer calls in ctypes handle errors appropriately
Larry Hastings
report at bugs.python.org
Tue Feb 23 05:20:48 CET 2010
Larry Hastings <larry at hastings.org> added the comment:
I finally reviewed this, and I think it does need additional armor against attack. I think a user could insert a different object into the thread local dict with the hard-coded name and get CPython to crash.
This patch fixes the vulnerability:
http://codereview.appspot.com/217092/show
If this goes in, I'll add it to the backport for 2.7.
----------
_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue5939>
_______________________________________
More information about the Python-bugs-list
mailing list