diff options
| author | Benjamin Peterson <benjamin@python.org> | 2014-04-14 02:10:38 (GMT) |
|---|---|---|
| committer | Benjamin Peterson <benjamin@python.org> | 2014-04-14 02:10:38 (GMT) |
| commit | 99b5afab74428e5ddfd877bdf3aa8a8c479696b1 (patch) | |
| tree | 44293ac5d0a038577e6d671f2488126ef3cab7eb /Misc | |
| parent | 80e6af1f61f2d63ff45ada00be841db9ad5e6c9f (diff) | |
| download | cpython-99b5afab74428e5ddfd877bdf3aa8a8c479696b1.zip cpython-99b5afab74428e5ddfd877bdf3aa8a8c479696b1.tar.gz cpython-99b5afab74428e5ddfd877bdf3aa8a8c479696b1.tar.bz2 | |
in scan_once, prevent the reading of arbitrary memory when passed a negative index
Bug reported by Guido Vranken.
Diffstat (limited to 'Misc')
| -rw-r--r-- | Misc/ACKS | 1 | ||||
| -rw-r--r-- | Misc/NEWS | 3 |
2 files changed, 4 insertions, 0 deletions
@@ -1139,6 +1139,7 @@ Frank Visser Johannes Vogel Martijn Vries Sjoerd de Vries +Guido Vranken Niki W. Waibel Wojtek Walczak Charles Waldman @@ -10,6 +10,9 @@ What's New in Python 3.2.6? Library ------- +- Fix arbitrary memory access in JSONDecoder.raw_decode with a negative second + parameter. Bug reported by Guido Vranken. + - Issue #21082: In os.makedirs, do not set the process-wide umask. Note this changes behavior of makedirs when exist_ok=True. |