[issue45408] [fuzzer] Weird input with continuation and newlines causes null deref in parser

Gregory P. Smith report at bugs.python.org
Thu Oct 7 16:01:36 EDT 2021


Gregory P. Smith <greg at krypto.org> added the comment:

Marking release blocker as a crash is bad for a function that is documented as safe for use on untrusted input so long as it isn't large enough to overflow the stack.

https://docs.python.org/3/library/ast.html#ast.literal_eval

----------
priority: normal -> release blocker

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue45408>
_______________________________________


More information about the Python-bugs-list mailing list