[proxy] bugs.python.org — ← back | site home | direct (HTTPS) ↗ | proxy home | ◑ dark◐ light

Issue 39510: use-after-free in BufferedReader.readinto()

Issue39510

classification
Title: use-after-free in BufferedReader.readinto()
Type: Stage: resolved
Components: Versions:
process
Status: closed Resolution: fixed
Dependencies: Superseder:
Assigned To: Nosy List: benjamin.peterson, miss-islington, phg
Priority: normal Keywords: patch

Created on 2020-01-31 15:19 by phg, last changed 2022-04-11 14:59 by admin. This issue is now closed.

Pull Requests
URL Status Linked Edit
PR 18295 merged phg, 2020-01-31 15:20
PR 18348 merged miss-islington, 2020-02-04 21:25
PR 18349 merged miss-islington, 2020-02-04 21:25
PR 18350 merged miss-islington, 2020-02-04 21:25
Messages (5)
msg361119 - (view) Author: Philipp Gesang (phg) * Date: 2020-01-31 15:19 
reader = open ("/dev/zero", "rb")
    _void  = reader.read (42)
    reader.close ()
    reader.readinto (bytearray (42)) ### BANG!

Bisected to commit dc469454ec. PR on Github to follow.
msg361369 - (view) Author: Benjamin Peterson (benjamin.peterson) * Date: 2020-02-04 21:25 
New changeset cb1c0746f277052e45a60d6c436a765e34722821 by Philipp Gesang in branch 'master':
closes bpo-39510: Fix use-after-free in BufferedReader.readinto() (GH-18295)
https://github.com/python/cpython/commit/cb1c0746f277052e45a60d6c436a765e34722821
msg361372 - (view) Author: miss-islington (miss-islington) Date: 2020-02-04 21:42 
New changeset 30e769382dfb67a68fe8e6bfe8509addb4aa9514 by Miss Islington (bot) in branch '3.8':
closes bpo-39510: Fix use-after-free in BufferedReader.readinto() (GH-18295)
https://github.com/python/cpython/commit/30e769382dfb67a68fe8e6bfe8509addb4aa9514
msg361373 - (view) Author: miss-islington (miss-islington) Date: 2020-02-04 21:43 
New changeset 97d2a9832494e4c85da124ceab18802eed9a4ab1 by Miss Islington (bot) in branch '3.7':
closes bpo-39510: Fix use-after-free in BufferedReader.readinto() (GH-18295)
https://github.com/python/cpython/commit/97d2a9832494e4c85da124ceab18802eed9a4ab1
msg361375 - (view) Author: Benjamin Peterson (benjamin.peterson) * Date: 2020-02-04 22:06 
New changeset c352e6c7446c894b13643f538db312092b351789 by Miss Islington (bot) in branch '3.6':
closes bpo-39510: Fix use-after-free in BufferedReader.readinto() (GH-18350)
https://github.com/python/cpython/commit/c352e6c7446c894b13643f538db312092b351789
History
Date User Action Args
2022-04-11 14:59:26adminsetgithub: 83691
2020-02-04 22:06:49benjamin.petersonsetmessages: + msg361375
2020-02-04 21:43:11miss-islingtonsetmessages: + msg361373
2020-02-04 21:42:01miss-islingtonsetnosy: + miss-islington
messages: + msg361372
2020-02-04 21:25:57miss-islingtonsetpull_requests: + pull_request17725
2020-02-04 21:25:49miss-islingtonsetpull_requests: + pull_request17724
2020-02-04 21:25:42miss-islingtonsetpull_requests: + pull_request17723
2020-02-04 21:25:25benjamin.petersonsetstatus: open -> closed

nosy: + benjamin.peterson
messages: + msg361369

resolution: fixed
stage: patch review -> resolved

2020-01-31 15:20:45phgsetkeywords: + patch
stage: patch review
pull_requests: + pull_request17669
2020-01-31 15:19:52phgcreate