pwd, spwd, grp functions vulnerable to denial of service · Issue #49109 · python/cpython · GitHub
Skip to content

pwd, spwd, grp functions vulnerable to denial of service #49109

Description

@baikie
mannequin
BPO 4859
Nosy @loewis, @vstinner
Files
  • bytes.diff: Add functions to return bytes objects
  • minor.diff: Fix refcount error and fd leak
  • latin1.diff: Make pwd use Latin-1
  • surrogateescape-fields.diff: Decode strings using surrogateescape
  • surrogateescape-args.diff: Encode string arguments using surrogateescape
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/loewis'
    closed_at = <Date 2009-05-29.15:23:38.047>
    created_at = <Date 2009-01-06.20:52:30.365>
    labels = ['type-security', 'extension-modules']
    title = 'pwd, spwd, grp functions vulnerable to denial of service'
    updated_at = <Date 2009-05-29.15:23:38.046>
    user = 'https://bugs.python.org/baikie'

    bugs.python.org fields:

    activity = <Date 2009-05-29.15:23:38.046>
    actor = 'loewis'
    assignee = 'loewis'
    closed = True
    closed_date = <Date 2009-05-29.15:23:38.047>
    closer = 'loewis'
    components = ['Extension Modules']
    creation = <Date 2009-01-06.20:52:30.365>
    creator = 'baikie'
    dependencies = []
    files = ['12621', '12622', '12623', '14055', '14056']
    hgrepos = []
    issue_num = 4859
    keywords = ['patch']
    message_count = 10.0
    messages = ['79286', '79316', '79319', '79320', '79322', '79323', '79376', '88273', '88274', '88511']
    nosy_count = 3.0
    nosy_names = ['loewis', 'vstinner', 'baikie']
    pr_nums = []
    priority = 'high'
    resolution = 'accepted'
    stage = None
    status = 'closed'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue4859'
    versions = ['Python 3.0', 'Python 3.1']

    Activity

    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Metadata

    Metadata

    Assignees

    Labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions