ada/cpython
0
0
Fork 0
mirror of https://github.com/AdaCore/cpython.git synced 2026-02-12 12:57:15 -08:00
Code Issues Packages Projects Releases Wiki Activity
Files
2545fa87628b4caca519da8aeb0eeef368b9dc0d
cpython/Modules
History
Philipp Gesang cb1c0746f2 closes bpo-39510: Fix use-after-free in BufferedReader.readinto() (GH-18295) 
When called on a closed object, readinto() segfaults on account
of a write to a freed buffer:

    ==220553== Process terminating with default action of signal 11 (SIGSEGV): dumping core
    ==220553==  Access not within mapped region at address 0x2A
    ==220553==    at 0x48408A0: memmove (vg_replace_strmem.c:1272)
    ==220553==    by 0x58DB0C: _buffered_readinto_generic (bufferedio.c:972)
    ==220553==    by 0x58DCBA: _io__Buffered_readinto_impl (bufferedio.c:1053)
    ==220553==    by 0x58DCBA: _io__Buffered_readinto (bufferedio.c.h:253)

Reproducer:

    reader = open ("/dev/zero", "rb")
    _void  = reader.read (42)
    reader.close ()
    reader.readinto (bytearray (42)) ### BANG!

The problem exists since 2012 when commit dc469454ec added code
to free the read buffer on close().

Signed-off-by: Philipp Gesang <philipp.gesang@intra2net.com>
2020-02-04 13:25:16 -08:00
..
_blake2
bpo-9216: Add usedforsecurity to hashlib constructors (GH-16044)
2019-09-12 19:30:00 -05:00
_ctypes
bpo-39393: Misleading error message on dependent DLL resolution failure (GH-18093)
2020-01-28 20:42:43 +11:00
_decimal
Revert mode change that loses information in directory listings on Linux. (#15366)
2019-08-21 23:00:04 +02:00
_io
closes bpo-39510: Fix use-after-free in BufferedReader.readinto() (GH-18295)
2020-02-04 13:25:16 -08:00
_multiprocessing
bpo-39511: Fix multiprocessing semlock_acquire() (GH-18298)
2020-02-01 01:25:59 +01:00
_sha3
bpo-9216: Add usedforsecurity to hashlib constructors (GH-16044)
2019-09-12 19:30:00 -05:00
_sqlite
bpo-39496: Remove redundant checks from _sqlite/cursor.c (GH-18270)
2020-02-01 23:45:34 +03:00
_ssl
bpo-34271: Fix compatibility with 1.0.2 (GH-13728)
2019-06-03 20:40:15 +02:00
_xxtestfuzz
bpo-38823: Clean up _xxtestfuzz initialization. (GH-17216)
2019-11-20 16:17:02 -08:00
cjkcodecs
bpo-38631: Avoid Py_FatalError() in _multibytecodec init (GH-17233)
2019-11-18 17:40:07 +01:00
clinic
bpo-39395: putenv() and unsetenv() always available (GH-18135)
2020-01-24 14:05:48 +01:00
expat
bpo-37731: Reorder includes in xmltok.c to avoid redefinition of _POSIX_C_SOURCE (GH-16733)
2019-10-12 20:14:11 +01:00
_abc.c
bpo-37547: add _PyObject_CallMethodOneArg (GH-14685)
2019-07-11 17:59:05 +09:00
_asynciomodule.c
Make repr of C accelerated TaskWakeupMethWrapper the same as of pure Python version (GH-17484)
2019-12-07 13:23:21 +02:00
_bisectmodule.c
bpo-33012: Fix invalid function cast warnings with gcc 8. (GH-6749)
2018-11-27 13:27:31 +02:00
_bz2module.c
bpo-36974: tp_print -> tp_vectorcall_offset and tp_reserved -> tp_as_async (GH-13464)
2019-05-30 19:13:39 -07:00
_codecsmodule.c
bpo-37206: Unrepresentable default values no longer represented as None. (GH-13933)
2019-09-14 12:24:05 +03:00
_collectionsmodule.c
bpo-37337: Add _PyObject_CallMethodNoArgs() (GH-14267)
2019-07-08 17:19:25 +09:00
_contextvarsmodule.c
bpo-38823: Clean up refleaks in _contextvars initialization. (GH-17198)
2019-11-16 15:57:32 -08:00
_cryptmodule.c
closes bpo-38402: Check error of primitive crypt/crypt_r. (GH-16599)
2019-10-07 21:22:17 -07:00
_csv.c
bpo-37994: Fix silencing all errors if an attribute lookup fails. (GH-15630)
2019-09-01 12:03:39 +03:00
_curses_panel.c
bpo-35810: Incref heap-allocated types in PyObject_Init (GH-11661)
2019-03-27 12:52:18 +01:00
_cursesmodule.c
bpo-36589: Fix the error handling in curses.update_lines_cols(). (GH-12766)
2019-11-17 19:10:13 +02:00
_datetimemodule.c
bpo-39237, datetime: Remove redundant call to round from delta_new (GH-17877)
2020-01-08 13:52:44 +01:00
_dbmmodule.c
bpo-37337: Add _PyObject_CallMethodNoArgs() (GH-14267)
2019-07-08 17:19:25 +09:00
_elementtree.c
bpo-38392: PyObject_GC_Track() validates object in debug mode (GH-16615)
2019-10-08 00:09:31 +02:00
_functoolsmodule.c
bpo-38644: Add _PyObject_VectorcallTstate() (GH-17052)
2019-11-08 10:05:17 +01:00
_gdbmmodule.c
bpo-37337: Add _PyObject_CallMethodNoArgs() (GH-14267)
2019-07-08 17:19:25 +09:00
_hashopenssl.c
bpo-38684: haslib: fix build when Blake2 not enabled in OpenSSL (#17043)
2019-11-04 15:55:56 +01:00
_heapqmodule.c
bpo-39421: Fix posible crash in heapq with custom comparison operators (GH-18118)
2020-01-23 14:07:05 +00:00
_json.c
bpo-1635741: Port _json extension module to multiphase initialization (PEP 489) (GH-17835)
2020-01-15 17:32:51 +01:00
_localemodule.c
bpo-36254: Fix invalid uses of %d in format strings in C. (GH-12264)
2019-03-13 22:59:55 +02:00
_lsprof.c
bpo-36974: tp_print -> tp_vectorcall_offset and tp_reserved -> tp_as_async (GH-13464)
2019-05-30 19:13:39 -07:00
_lzmamodule.c
bpo-21872: fix lzma library decompresses data incompletely (GH-14048)
2019-09-12 15:20:37 +01:00
_math.c
Issue #28256: Cleanup _math.c
2016-10-18 16:29:27 +02:00
_math.h
Issue #28256: Cleanup _math.c
2016-10-18 16:29:27 +02:00
_opcode.c
bpo-32455: Add jump parameter to dis.stack_effect(). (GH-6610)
2018-09-18 09:54:26 +03:00
_operator.c
bpo-36974: tp_print -> tp_vectorcall_offset and tp_reserved -> tp_as_async (GH-13464)
2019-05-30 19:13:39 -07:00
_pickle.c
bpo-39492: Fix a reference cycle between reducer_override and a Pickler instance (GH-18266)
2020-02-02 10:55:21 -08:00
_posixsubprocess.c
bpo-38417: Add umask support to subprocess (GH-16726)
2019-10-12 13:24:56 -07:00
_queuemodule.c
bpo-36974: tp_print -> tp_vectorcall_offset and tp_reserved -> tp_as_async (GH-13464)
2019-05-30 19:13:39 -07:00
_randommodule.c
bpo-38321: Fix compiler warning in _randommodule.c (GH-16512)
2019-10-01 12:45:52 +02:00
_scproxy.c
closes bpo-31903: Release the GIL when calling into SystemConfiguration (GH-4178)
2018-09-11 16:14:00 -07:00
_sre.c
bpo-39271: Remove dead assignment from pattern_subx (GH-17915)
2020-01-09 08:27:51 +02:00
_ssl_data.h
…
_ssl.c
bpo-39272: Remove dead assignment from _ssl__SSLContext_load_verify_locations_impl (GH-17916)
2020-01-09 10:12:12 +01:00
_stat.c
bpo-37834: Normalise handling of reparse points on Windows (GH-15231)
2019-08-21 15:27:33 -07:00
_statisticsmodule.c
Clean up module initialization. (GH-17215)
2019-11-18 23:16:23 -08:00
_struct.c
bpo-38140: Make dict and weakref offsets opaque for C heap types (#16076)
2019-09-19 17:29:05 +01:00
_testbuffer.c
bpo-36974: tp_print -> tp_vectorcall_offset and tp_reserved -> tp_as_async (GH-13464)
2019-05-30 19:13:39 -07:00
_testcapimodule.c
bpo-39542: Simplify _Py_NewReference() (GH-18332)
2020-02-03 17:55:04 +01:00
_testimportmultiple.c
…
_testinternalcapi.c
bpo-36763: Implement the PEP 587 (GH-13592)
2019-05-27 16:39:22 +02:00
_testmultiphase.c
bpo-32388: Remove cross-version binary compatibility requirement in tp_flags (GH-4944)
2019-05-29 22:12:38 +02:00
_threadmodule.c
bpo-38858: Add _Py_IsMainInterpreter(tstate) (GH-17293)
2019-11-20 17:34:39 +01:00
_tkinter.c
bpo-38835: Don't use PyFPE_START_PROTECT and PyFPE_END_PROTECT (GH-17231)
2019-11-20 02:51:30 +01:00
_tracemalloc.c
bpo-38823: Fix refleak in _tracemalloc init error handling (GH-17235)
2019-11-20 11:00:31 +01:00
_uuidmodule.c
bpo-32627: Fix compile error when conflicting _uuid headers included (GH-11751)
2019-06-24 13:59:50 -04:00
_weakref.c
bpo-32150: Expand tabs to spaces in C files. (#4583)
2017-11-28 17:56:10 +02:00
_winapi.c
bpo-36974: tp_print -> tp_vectorcall_offset and tp_reserved -> tp_as_async (GH-13464)
2019-05-30 19:13:39 -07:00
_xxsubinterpretersmodule.c
closes bpo-39262: Use specific out-of-memory message in _sharedexception_bind. (GH-17908)
2020-01-08 18:48:52 -08:00
addrinfo.h
…
arraymodule.c
bpo-38916: array.array: remove fromstring() and tostring() (GH-17487)
2019-12-09 14:09:14 +01:00
atexitmodule.c
bpo-33012: Fix invalid function cast warnings with gcc 8. (GH-6749)
2018-11-27 13:27:31 +02:00
audioop.c
bpo-38303: Make audioop extension module PEP-384 compatible (GH-16497)
2019-10-22 06:07:03 -07:00
binascii.c
bpo-39353: binascii.crc_hqx() is no longer deprecated (GH-18276)
2020-01-30 09:56:40 +01:00
cmathmodule.c
bpo-38835: Don't use PyFPE_START_PROTECT and PyFPE_END_PROTECT (GH-17231)
2019-11-20 02:51:30 +01:00
config.c.in
rename _imp initialization function to follow conventions (#5432)
2018-01-29 11:33:57 -08:00
errnomodule.c
…
faulthandler.c
bpo-38631: Add _Py_NO_RETURN to functions calling Py_FatalError() (GH-18278)
2020-01-30 13:09:11 +01:00
fcntlmodule.c
bpo-38823: Clean up refleak in fcntl module initialization. (GH-17236)
2019-11-19 11:16:29 -08:00
gc_weakref.txt
…
gcmodule.c
bpo-38631: Avoid Py_FatalError() in GC collect() (GH-18164)
2020-01-24 18:05:24 +01:00
getaddrinfo.c
bpo-32241: Add the const qualifire to declarations of umodifiable strings. (#4748)
2017-12-12 13:55:04 +02:00
getbuildinfo.c
bpo-27593: Get SCM build info from git instead of hg. (#446)
2017-03-04 00:19:55 -05:00
getnameinfo.c
…
getpath.c
bpo-38353: Fix typos in calculate_argv0_path_framework() (GH-16695)
2019-10-10 15:42:30 +02:00
grpmodule.c
bpo-38072: PEP-384 grpmodule (GH-15788)
2019-09-10 03:30:36 -07:00
hashlib.h
bpo-31370: Remove support for threads-less builds (#3385)
2017-09-07 18:56:24 +02:00
hashtable.c
bpo-36594: Fix incorrect use of %p in format strings (GH-12769)
2019-05-06 12:56:50 -04:00
hashtable.h
…
itertoolsmodule.c
Minor readability improvement for argument handling in itertools.repeat() (GH-17101)
2019-11-09 20:28:31 -08:00
ld_so_aix.in
Issue #10656: Fix out-of-tree building on AIX
2016-11-20 07:56:37 +00:00
main.c
bpo-38353: Cleanup includes in the internal C API (GH-16548)
2019-10-02 23:51:20 +02:00
makesetup
closes bpo-34212: Build core extension modules with Py_BUILD_CORE_BUILTIN. (GH-8712)
2018-11-26 20:21:31 -06:00
makexp_aix
…
mathmodule.c
bpo-39396: Fix math.nextafter(-0.0, +0.0) on AIX 7.1 (GH-18094)
2020-01-21 11:14:10 +01:00
md5module.c
bpo-9216: Add usedforsecurity to hashlib constructors (GH-16044)
2019-09-12 19:30:00 -05:00
mmapmodule.c
bpo-38465: Convert the type of exports counters to Py_ssize_t. (GH-16746)
2019-10-21 09:31:46 +03:00
nismodule.c
bpo-35356: Fix a possible reference leak in nis.maps(). (GH-10808)
2018-11-30 09:40:16 +02:00
ossaudiodev.c
Remove a dead comment from ossaudiodev.c (#15346)
2019-08-20 12:20:47 -07:00
overlapped.c
bpo-37445: Include FORMAT_MESSAGE_IGNORE_INSERTS in FormatMessageW() calls (GH-14462)
2019-09-09 02:20:38 -07:00
parsermodule.c
bpo-15999: Clean up of handling boolean arguments. (GH-15610)
2019-09-01 12:16:51 +03:00
posixmodule.c
bpo-39395: putenv() and unsetenv() always available (GH-18135)
2020-01-24 14:05:48 +01:00
posixmodule.h
bpo-33441: Make the sigset_t converter available in other modules. (GH-6720)
2018-05-08 07:48:50 +03:00
pwdmodule.c
bpo-38073: Make pwd module PEP-384 compatible (GH-15790)
2019-09-10 05:59:43 -07:00
pyexpat.c
bpo-38392: PyObject_GC_Track() validates object in debug mode (GH-16615)
2019-10-08 00:09:31 +02:00
readline.c
bpo-38634: Allow non-apple build to cope with libedit (GH-16986)
2019-12-04 17:02:57 +01:00
README
…
resource.c
bpo-34674: Assume unistd.h exists on Unix. (GH-9290)
2018-09-13 21:57:31 -07:00
rotatingtree.c
…
rotatingtree.h
bpo-32150: Expand tabs to spaces in C files. (#4583)
2017-11-28 17:56:10 +02:00
selectmodule.c
bpo-39239: epoll.unregister() no longer ignores EBADF (GH-17882)
2020-01-07 15:00:02 +01:00
Setup
bpo-37798: Add C fastpath for statistics.NormalDist.inv_cdf() (GH-15266)
2019-08-23 15:20:30 -07:00
sha1module.c
bpo-9216: Add usedforsecurity to hashlib constructors (GH-16044)
2019-09-12 19:30:00 -05:00
sha256module.c
bpo-9216: Add usedforsecurity to hashlib constructors (GH-16044)
2019-09-12 19:30:00 -05:00
sha512module.c
bpo-9216: Add usedforsecurity to hashlib constructors (GH-16044)
2019-09-12 19:30:00 -05:00
signalmodule.c
closes bpo-38712: Add signal.pidfd_send_signal. (GH-17070)
2019-11-19 20:39:14 -08:00
socketmodule.c
bpo-38282: Rewrite getsockaddrarg() helper function (GH-16698)
2019-10-10 21:30:20 +02:00
socketmodule.h
bpo-38282: Correctly manage the Bluetooth L2CAP socket structure in FreeBSD (GH-16738)
2019-10-13 02:03:54 +01:00
spwdmodule.c
[security] bpo-13617: Reject embedded null characters in wchar* strings. (#2302)
2017-06-28 08:30:06 +03:00
sre_constants.h
bpo-31690: Allow the inline flags "a", "L", and "u" to be used as group flags for RE. (#3885)
2017-10-24 23:31:42 +03:00
sre_lib.h
bpo-34294: re module, fix wrong capturing groups in rare cases. (GH-11546)
2019-02-18 15:26:37 +02:00
sre.h
bpo-25054, bpo-1647489: Added support of splitting on zerowidth patterns. (#4471)
2017-12-04 14:29:05 +02:00
symtablemodule.c
bpo-37253: Add _PyCompilerFlags_INIT macro (GH-14018)
2019-06-13 02:16:41 +02:00
syslogmodule.c
bpo-38361: syslog: fixed making default "ident" from sys.argv[0] (GH-16557)
2020-01-14 09:57:04 -08:00
termios.c
bpo-28367: Add additional baud rates for termios (GH-13142)
2020-01-04 13:56:31 +01:00
testcapi_long.h
…
timemodule.c
bpo-36205: Fix the rusage implementation of time.process_time() (GH-15538)
2019-08-27 00:13:12 -04:00
tkappinit.c
…
tkinter.h
…
unicodedata_db.h
closes bpo-36861: Update Unicode database to 12.1.0. (GH-13214)
2019-05-08 20:59:35 -07:00
unicodedata.c
bpo-37752: Delete redundant Py_CHARMASK in normalizestring() (GH-15095)
2019-09-10 17:04:08 +01:00
unicodename_db.h
closes bpo-36861: Update Unicode database to 12.1.0. (GH-13214)
2019-05-08 20:59:35 -07:00
winreparse.h
bpo-31512: Add non-elevated symlink support for Windows (GH-3652)
2019-04-09 11:19:46 -07:00
xxlimited.c
bpo-32388: Remove cross-version binary compatibility requirement in tp_flags (GH-4944)
2019-05-29 22:12:38 +02:00
xxmodule.c
bpo-36974: tp_print -> tp_vectorcall_offset and tp_reserved -> tp_as_async (GH-13464)
2019-05-30 19:13:39 -07:00
xxsubtype.c
bpo-36974: tp_print -> tp_vectorcall_offset and tp_reserved -> tp_as_async (GH-13464)
2019-05-30 19:13:39 -07:00
zlibmodule.c
bpo-38074: Make zlib extension module PEP-384 compatible (GH-15792)
2019-09-10 03:27:03 -07:00

README 

Source files for standard library extension modules,
and former extension modules that are now builtin modules.
Reference in New Issue View Git Blame Copy Permalink