Issue 3306: audioop.findmax() crashs with negative length (original ) (raw ) Issue3306
Created on 2008-07-06 21:57 by vstinner , last changed 2022-04-11 14:56 by admin . This issue is now closed .
Files
File name
Uploaded
Description
Edit
audioop_findmax.patch
vstinner,2008-07-06 21:57
Patch to fix described bug
Messages (2)
msg69356 - (view)
Author: STINNER Victor (vstinner) *
Date: 2008-07-06 21:57
Example: >>> import audioop >>> audioop.findmax(''.join( chr(x) for x in xrange(256)), -2392392) Erreur de segmentation (core dumped) The problem is that audioop_findmax() doesn't check len2 for negative value. Here is a patch ;-)
msg69391 - (view)
Author: Facundo Batista (facundobatista) *
Date: 2008-07-07 17:03
Commited in r64775 . Thank you very much!!
History
Date
User
Action
Args
2022-04-11 14:56:36
admin
set
github: 47556
2008-07-07 17:03:22
facundobatista
set
status: open -> closedresolution: acceptedmessages: + nosy: + facundobatista
2008-07-06 21:57:58
vstinner
create