[issue27760] integer overflow in binascii.b2a_qp

2016-08-14 Thread tehybel
tehybel added the comment: The patch seems correct to me. -- nosy: +tehybel ___ Python tracker ___ ___

[issue27760] integer overflow in binascii.b2a_qp

2016-08-13 Thread Roundup Robot
Roundup Robot added the comment: New changeset af42635b5ed1 by Benjamin Peterson in branch '2.7': fix possible integer overflow in binascii.b2a_qp (closes #27760) https://hg.python.org/cpython/rev/af42635b5ed1 New changeset 54c74212db91 by Benjamin Peterson in branch '3.3': fix possible integer

[issue27760] integer overflow in binascii.b2a_qp

2016-08-13 Thread Benjamin Peterson
New submission from Benjamin Peterson: Thomas E Hybel reports: This vulnerability resides in /Modules/binascii.c in the function binascii_b2a_qp_impl. The problem is that the integer variable "odatalen" can overflow to become a small number. The function binascii_b2a_qp_impl qp-encodes binary