[issue5939] Ensure that PyCapsule_GetPointer calls in ctypes handle errors appropriately

Larry Hastings report at bugs.python.org
Tue Feb 23 05:20:48 CET 2010


Larry Hastings <larry at hastings.org> added the comment:

I finally reviewed this, and I think it does need additional armor against attack.  I think a user could insert a different object into the thread local dict with the hard-coded name and get CPython to crash.

This patch fixes the vulnerability:
http://codereview.appspot.com/217092/show

If this goes in, I'll add it to the backport for 2.7.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue5939>
_______________________________________


More information about the Python-bugs-list mailing list