8000 Address CVE-2019-20907 in tarfile module by ucodery · Pull Request #3 · ActiveState/cpython · GitHub
[go: up one dir, main page]
Skip to content

Address CVE-2019-20907 in tarfile module #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Nov 4, 2020
Merged

Address CVE-2019-20907 in tarfile module #3

merged 1 commit into from
Nov 4, 2020

Conversation

ucodery
Copy link
@ucodery ucodery commented Nov 3, 2020

No description provided.

@shaunmlowry shaunmlowry merged commit 02daa01 into 2.7 Nov 4, 2020
@ucodery ucodery deleted the jeremyp/cve-20907 branch November 4, 2020 21:08
ucodery pushed a commit to ucodery/cpython that referenced this pull request May 5, 2022
@gpshead
pythongh-89455: Fix an uninitialized bool in exception print context. (…
861974b 
…python#91466)

Fix an uninitialized bool in exception print context.
    
`struct exception_print_context.need_close` was uninitialized.
    
Found by oss-fuzz in a test case running under the undefined behavior sanitizer.
    
https://oss-fuzz.com/testcase-detail/6217746058182656
    
```
Python/pythonrun.c:1241:28: runtime error: load of value 253, which is not a valid value for type 'bool'
    #0 0xbf2203 in print_chained cpython3/Python/pythonrun.c:1241:28
    #1 0xbea4bb in print_exception_cause_and_context cpython3/Python/pythonrun.c:1320:19
    ActiveState#2 0xbea4bb in print_exception_recursive cpython3/Python/pythonrun.c:1470:13
    ActiveState#3 0xbe9e39 in _PyErr_Display cpython3/Python/pythonrun.c:1517:9
```
    
Pretty obvious what the ommission was upon code inspection.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@shaunmlowry shaunmlowry shaunmlowry approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@ucodery @shaunmlowry
0