[issue18564] Integer overflow in socketmodule

2019-04-17 Thread STINNER Victor
STINNER Victor added the comment: > In Modules/socketmodule.c , the bluetooth address supplied is vulnerable to > integer overflow. Attached PR 12864 modifies the following code: unsigned int b0, b1, b2, b3, b4, b5; char ch; int n; n = sscanf(name, "%X:%X:%X:%X:%X:%X%c", &b5, &b4, &

[issue18564] Integer overflow in socketmodule

2019-04-17 Thread Roundup Robot
Change by Roundup Robot : -- pull_requests: +12791 stage: -> patch review ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue18564] Integer overflow in socketmodule

2019-04-10 Thread Cheryl Sabella
Cheryl Sabella added the comment: Michele Orrù, Would you be interested in making a GitHub pull request for your patch? Thanks! -- nosy: +cheryl.sabella ___ Python tracker __

[issue18564] Integer overflow in socketmodule

2014-06-10 Thread Michele Orrù
Michele Orrù added the comment: ping. -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.or

[issue18564] Integer overflow in socketmodule

2014-05-11 Thread Arfrever Frehtes Taifersar Arahesis
Changes by Arfrever Frehtes Taifersar Arahesis : -- nosy: +Arfrever ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscri

[issue18564] Integer overflow in socketmodule

2014-05-08 Thread Antoine Pitrou
Antoine Pitrou added the comment: > I am thinking about patching it there and then open another ticket > here in order to adopt str2ba(). This way we can close this ticket for > now. Well, if some str2ba() versions are notoriously buggy, we should probably not use it, IMHO. -- ___

[issue18564] Integer overflow in socketmodule

2014-05-03 Thread Michele Orrù
Michele Orrù added the comment: Interestingly, implements a function for parsing bluetooth addresses, but it's completely broken. It would be much much more elegant to use str2ba() in our source code though. I am think

[issue18564] Integer overflow in socketmodule

2014-05-03 Thread Michele Orrù
Changes by Michele Orrù : Added file: http://bugs.python.org/file35146/issue18564.3.patch ___ Python tracker ___ ___ Python-bugs-list mailing

[issue18564] Integer overflow in socketmodule

2014-04-30 Thread Antoine Pitrou
Antoine Pitrou added the comment: Ah, I had to install libbluetooth-dev. Sorry for the noise. -- ___ Python tracker ___ ___ Python-bug

[issue18564] Integer overflow in socketmodule

2014-04-30 Thread Antoine Pitrou
Antoine Pitrou added the comment: Interestingly, the tests are skipped here (Linux 3.11.0-20-generic). For some reason my socket module is built without bluetooth support (HAVE_BLUETOOTH_BLUETOOTH_H and HAVE_BLUETOOTH_H are both undefined). -- ___ P

[issue18564] Integer overflow in socketmodule

2014-04-30 Thread Michele Orrù
Changes by Michele Orrù : Added file: http://bugs.python.org/file35112/issue18564.2.patch ___ Python tracker ___ ___ Python-bugs-list mailing

[issue18564] Integer overflow in socketmodule

2014-04-28 Thread Antoine Pitrou
Antoine Pitrou added the comment: Michele, do you plan to update this patch? -- ___ Python tracker ___ ___ Python-bugs-list mailing li

[issue18564] Integer overflow in socketmodule

2013-08-27 Thread Michele Orrù
Michele Orrù added the comment: oops, didn't see :) thanks. -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue18564] Integer overflow in socketmodule

2013-08-27 Thread Antoine Pitrou
Antoine Pitrou added the comment: Ah, haven't you seen Charles-François' comments on the review tool? Click on the "review" link next to your patch :-) -- ___ Python tracker ___

[issue18564] Integer overflow in socketmodule

2013-08-27 Thread Michele Orrù
Michele Orrù added the comment: Ping. -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org

[issue18564] Integer overflow in socketmodule

2013-07-27 Thread STINNER Victor
Changes by STINNER Victor : -- nosy: +haypo ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.

[issue18564] Integer overflow in socketmodule

2013-07-27 Thread Michele Orrù
Changes by Michele Orrù : Added file: http://bugs.python.org/file31056/issue18564.1.patch ___ Python tracker ___ ___ Python-bugs-list mailing

[issue18564] Integer overflow in socketmodule

2013-07-27 Thread Antoine Pitrou
Antoine Pitrou added the comment: Instead of writing try / except / self.fail, you could simply use the context manager form of assertRaises. -- nosy: +neologix, pitrou ___ Python tracker _

[issue18564] Integer overflow in socketmodule

2013-07-26 Thread Michele Orrù
New submission from Michele Orrù: In Modules/socketmodule.c , the bluetooth address supplied is vulnerable to integer overflow. Attaching patch and a couple of tests, which should be considered as a step forward in #7687. -- components: Extension Modules files: btoverflow.patch keywor