[issue24917] time_strftime() Buffer Over-read

Larry Hastings report at bugs.python.org
Mon Sep 7 00:04:04 CEST 2015


Larry Hastings added the comment:

Having slept on it, I agree with Steve.  We should make the minimal change necessary in order to not crash.

However, it still needs a regression test.  The test can use JohnLeitch's proposed test as a good starting point, but it must accept either success or ValueError as passing the test.

I still think there's merit in detecting a trailing unquoted % at the end of the format string, but that would only be appropriate for 3.6 at this point.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue24917>
_______________________________________


More information about the Python-bugs-list mailing list