[issue24566] Unsigned Integer Overflow in sre_lib.h

Serhiy Storchaka added the comment: Thank you for your report. Without your example the patch would postponed indefinitely. -- ___ Python tracker ___ ___

[issue24566] Unsigned Integer Overflow in sre_lib.h

bee13oy added the comment: Thank you. I got it. 2015-07-06 18:53 GMT+08:00 Serhiy Storchaka : > > Serhiy Storchaka added the comment: > > Yes, this patch was not applied because it had no visible effect on Linux. > Now, with your report, there is a case on Windows. > > -- > > __

[issue24566] Unsigned Integer Overflow in sre_lib.h

Changes by Serhiy Storchaka : -- Removed message: http://bugs.python.org/msg246353 ___ Python tracker ___ ___ Python-bugs-list mailing

[issue24566] Unsigned Integer Overflow in sre_lib.h

Serhiy Storchaka added the comment: Yes, this patch was not applied because it had no visible effect on Linux. Now, with your report, there is a case on Windows. -- ___ Python tracker _

[issue24566] Unsigned Integer Overflow in sre_lib.h

Serhiy Storchaka added the comment: Yes, this patch was not applied because it had no visible effect on Linux. No, with your report, there is a case on Windows. -- assignee: -> serhiy.storchaka resolution: -> duplicate stage: -> resolved status: open -> closed superseder: -> Pointer

[issue24566] Unsigned Integer Overflow in sre_lib.h

bee13oy added the comment: I tested this path, and It really fixed this issue. But I'm wondering Python 2.7.10 was released at May 23, 2015, and this path was created at March 22,2015. So does it mean, Python 2.7.10/3.5.0b2 was compiled and released without applying this path? -- ___

[issue24566] Unsigned Integer Overflow in sre_lib.h

Mark Lawrence added the comment: Fixed by the patch on issue18684, see also my comments there. -- nosy: +BreamoreBoy ___ Python tracker ___ __

[issue24566] Unsigned Integer Overflow in sre_lib.h

Serhiy Storchaka added the comment: Not having Windows I can't reproduce the crash. Someone should test if the patch for issue18684 fixes this issue and doesn't introduce other regressions. -- ___ Python tracker _

[issue24566] Unsigned Integer Overflow in sre_lib.h

bee13oy added the comment: I have just tested python 2.7.10 on Windows 7 x86 with the poc code, it will also result in python crash. -- ___ Python tracker ___ __

[issue24566] Unsigned Integer Overflow in sre_lib.h

bee13oy added the comment: I didn't test that path, I just found this bug in python3.4.3 by fuzzing re module, and tested Python 3.5.0b2 on windows 7 x86, It has the same problem. -- ___ Python tracker ___

[issue24566] Unsigned Integer Overflow in sre_lib.h

Serhiy Storchaka added the comment: Does the patch for issue18684 fix this issue? -- ___ Python tracker ___ ___ Python-bugs-list maili

[issue24566] Unsigned Integer Overflow in sre_lib.h

Changes by Ezio Melotti : -- nosy: +haypo, serhiy.storchaka type: -> crash ___ Python tracker ___ ___ Python-bugs-list mailing list U

[issue24566] Unsigned Integer Overflow in sre_lib.h

New submission from bee13oy: I found an Unsigned Integer Overflow in sre_lib.h. Tested on En Windows 7 x86 + Python 3.4.3 / Python 3.5.0b2 Crash: -- (1a84.16b0): Access violation - code c005 (!!! second chance !!!) eax=0002 ebx=0038f40c ecx=0002 edx=0526cbb8 esi=83e0116b edi=c3e