Skip to content

[security] CVE-2017-1000158: Unsafe arithmetic in PyString_DecodeEscape #74842

@jaybosamiya

Description

@jaybosamiya
BPO 30657
Nosy @vstinner, @larryhastings, @ned-deily, @serhiy-storchaka, @jaybosamiya, @kirotawa
PRs
  • [2.7] bpo-30657: Check & prevent integer overflow in PyString_DecodeEscape #2174
  • [3.5] bpo-30657: Check & prevent integer overflow in PyString_DecodeEscape (GH-2174) #4664
  • [3.4] bpo-30657: Check & prevent integer overflow in PyString_DecodeEscape (GH-2174) #4758
  • Files
  • poc-gen.py: Generates poc.py
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/serhiy-storchaka'
    closed_at = <Date 2017-12-08.21:36:52.023>
    created_at = <Date 2017-06-13.15:35:29.340>
    labels = ['type-security', 'interpreter-core', 'easy']
    title = '[security] CVE-2017-1000158: Unsafe arithmetic in PyString_DecodeEscape'
    updated_at = <Date 2019-05-10.18:20:34.287>
    user = 'https://github.com/jaybosamiya'

    bugs.python.org fields:

    activity = <Date 2019-05-10.18:20:34.287>
    actor = 'ned.deily'
    assignee = 'serhiy.storchaka'
    closed = True
    closed_date = <Date 2017-12-08.21:36:52.023>
    closer = 'larry'
    components = ['Interpreter Core']
    creation = <Date 2017-06-13.15:35:29.340>
    creator = 'jaybosamiya'
    dependencies = []
    files = ['46950']
    hgrepos = []
    issue_num = 30657
    keywords = ['patch', 'easy (C)']
    message_count = 17.0
    messages = ['295930', '295947', '295957', '296277', '306823', '306826', '306875', '306890', '307138', '307238', '307240', '307243', '307245', '307246', '307868', '307869', '307870']
    nosy_count = 6.0
    nosy_names = ['vstinner', 'larry', 'ned.deily', 'serhiy.storchaka', 'jaybosamiya', 'leosilva']
    pr_nums = ['2174', '4664', '4758']
    priority = 'normal'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue30657'
    versions = ['Python 2.7', 'Python 3.4', 'Python 3.5']

    Metadata

    Metadata

    Labels

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions