[issue24630] null pointer dereference in `load_newobj_ex`

Brad Larsen report at bugs.python.org
Tue Jul 14 04:36:15 CEST 2015


Brad Larsen added the comment:

Also, it appears that the `ob_type` field of `cls` need not be NULL; it can be an arbitrary value treated as a memory location.

Attached another POC that triggers this case.

----------
Added file: http://bugs.python.org/file39922/bug-nonnull.py

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue24630>
_______________________________________


More information about the Python-bugs-list mailing list