[issue39401] Unsafe dll loading in getpathp.c on Win7

Steve Dower report at bugs.python.org
Wed Jan 22 20:56:01 EST 2020


Steve Dower <steve.dower at python.org> added the comment:

Agreed, we can just search System32 for this. Thanks for doing the patch!

For future reference, and for anyone else reading this, we generally prefer unavoidable DLL hijacking bugs to come to the Python Security Response Team first (security at python.org).

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue39401>
_______________________________________


More information about the Python-bugs-list mailing list