[issue41189] An exploitable segmentation fault in _PyEval_EvalFrameDefault

Ned Deily report at bugs.python.org
Wed Jul 1 15:18:13 EDT 2020


Ned Deily <nad at python.org> added the comment:

If users have unrestricted access to the interpreter, there are easier ways to crash Python than with modified byte code, for example, as is documented with ctypes. As noted on the Python Security Team web page (https://www.python.org/dev/security/): "If you can already execute Python code, there are far worse things you can do than provoke a use-after-free or an interpreter crash."

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue41189>
_______________________________________


More information about the Python-bugs-list mailing list