Issue 34824: _ssl.c: Possible null pointer dereference (original) (raw)

This issue has been migrated to GitHub: https://github.com/python/cpython/issues/79005

classification

Title: _ssl.c: Possible null pointer dereference
Type: Stage: resolved
Components: Extension Modules, SSL Versions: Python 3.8, Python 3.7, Python 3.6

process

Status: closed Resolution: fixed
Dependencies: Superseder:
Assigned To: christian.heimes Nosy List: ZackerySpytz, christian.heimes, miss-islington, serhiy.storchaka, vstinner, yselivanov
Priority: normal Keywords: patch

Created on 2018-09-27 17:07 by ZackerySpytz, last changed 2022-04-11 14:59 by admin. This issue is now closed.

Pull Requests
URL Status Linked Edit
PR 9606 merged ZackerySpytz,2018-09-27 17:11
PR 9743 merged miss-islington,2018-10-06 17:42
PR 9744 merged miss-islington,2018-10-06 17:42
Messages (6)
msg326573 - (view) Author: Zackery Spytz (ZackerySpytz) * (Python triager) Date: 2018-09-27 17:07
If _PyBytes_Resize() fails in _ssl_MemoryBIO_read_impl(), Py_DECREF() will be called on a null pointer.
msg326814 - (view) Author: Serhiy Storchaka (serhiy.storchaka) * (Python committer) Date: 2018-10-01 16:29
Good catch, but there is more than one error here.
msg327255 - (view) Author: miss-islington (miss-islington) Date: 2018-10-06 17:41
New changeset 365ad2ead5bbaf7a3b18648ffa36e819559d3f75 by Miss Islington (bot) (Zackery Spytz) in branch 'master': bpo-34824: Fix a possible NULL pointer dereference in _ssl.c (GH-9606) https://github.com/python/cpython/commit/365ad2ead5bbaf7a3b18648ffa36e819559d3f75
msg328076 - (view) Author: STINNER Victor (vstinner) * (Python committer) Date: 2018-10-19 23:14
New changeset 4ec9f64e07c8f397ad6699f8b99843846c219588 by Victor Stinner (Miss Islington (bot)) in branch '3.7': bpo-34824: Fix a possible NULL pointer dereference in _ssl.c (GH-9606) (GH-9743) https://github.com/python/cpython/commit/4ec9f64e07c8f397ad6699f8b99843846c219588
msg328077 - (view) Author: STINNER Victor (vstinner) * (Python committer) Date: 2018-10-19 23:14
New changeset d92816de667169fbd54a3442705bc07286e8c69d by Victor Stinner (Miss Islington (bot)) in branch '3.6': bpo-34824: Fix a possible NULL pointer dereference in _ssl.c (GH-9606) (GH-9744) https://github.com/python/cpython/commit/d92816de667169fbd54a3442705bc07286e8c69d
msg328078 - (view) Author: STINNER Victor (vstinner) * (Python committer) Date: 2018-10-19 23:16
Thanks Zackery Spytz for the report and the fix!
History
Date User Action Args
2022-04-11 14:59:06 admin set github: 79005
2018-10-19 23:16:33 vstinner set status: open -> closedresolution: fixedmessages: + stage: patch review -> resolved
2018-10-19 23:14:52 vstinner set messages: +
2018-10-19 23:14:47 vstinner set nosy: + vstinnermessages: +
2018-10-06 17:42:09 miss-islington set pull_requests: + <pull%5Frequest9132>
2018-10-06 17:42:03 miss-islington set pull_requests: + <pull%5Frequest9131>
2018-10-06 17:41:51 miss-islington set nosy: + miss-islingtonmessages: +
2018-10-01 16:29:12 serhiy.storchaka set nosy: + serhiy.storchakamessages: +
2018-09-27 17:11:30 ZackerySpytz set keywords: + patchstage: patch reviewpull_requests: + <pull%5Frequest9003>
2018-09-27 17:09:12 yselivanov set nosy: + yselivanov
2018-09-27 17:07:57 ZackerySpytz create