[issue27863] multiple issues in _elementtree module

Change by Eryk Sun : -- nosy: -ahmedsayeed1982 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue27863] multiple issues in _elementtree module

Change by Eryk Sun : -- Removed message: https://bugs.python.org/msg405690 ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue27863] multiple issues in _elementtree module

Ahmed Sayeed added the comment: amd64-linux-siginfo.c: Adjust include order to avoid gnulib error http://www.compilatori.com/computers/latest-car-deals/ On Fedora rawhide, after updating to glibc-2.33, I'm seeing the following build failure:

[issue27863] multiple issues in _elementtree module

Changes by Serhiy Storchaka : -- dependencies: -various issues due to misuse of PySlice_GetIndicesEx resolution: -> fixed stage: backport needed -> resolved status: open -> closed ___ Python tracker

[issue27863] multiple issues in _elementtree module

Serhiy Storchaka added the comment: New changeset 9c2c42c221d7996070c0c0a2a114ab42fe3ddb9d by Serhiy Storchaka in branch '2.7': bpo-27863: Fixed multiple crashes in ElementTree. (#765) (#903) (#963) https://github.com/python/cpython/commit/9c2c42c221d7996070c0c0a2a114ab42fe3ddb9d --

[issue27863] multiple issues in _elementtree module

Changes by Serhiy Storchaka : -- pull_requests: +1142 ___ Python tracker ___ ___

[issue27863] multiple issues in _elementtree module

Serhiy Storchaka added the comment: New changeset a6b4e1902250d6f28ca6d083ce1c8d7e9b91974b by Serhiy Storchaka in branch '3.6': bpo-27863: Fixed multiple crashes in ElementTree. (#765) (#903) https://github.com/python/cpython/commit/a6b4e1902250d6f28ca6d083ce1c8d7e9b91974b --

[issue27863] multiple issues in _elementtree module

Serhiy Storchaka added the comment: Since it is hard to backport the bugfix to 2.7 without test, issue15083 is a dependence. -- dependencies: +Rewrite ElementTree tests in a cleaner and safer way stage: needs patch -> backport needed ___ Python

[issue27863] multiple issues in _elementtree module

Serhiy Storchaka added the comment: New changeset c90ff1b78cb79bc3762184e03fa81f11984aaa45 by Serhiy Storchaka in branch '3.5': bpo-27863: Fixed multiple crashes in ElementTree. (#765) (#904) https://github.com/python/cpython/commit/c90ff1b78cb79bc3762184e03fa81f11984aaa45 --

[issue27863] multiple issues in _elementtree module

Changes by Serhiy Storchaka : -- pull_requests: +804 ___ Python tracker ___ ___

[issue27863] multiple issues in _elementtree module

Changes by Serhiy Storchaka : -- pull_requests: +803 ___ Python tracker ___ ___

[issue27863] multiple issues in _elementtree module

Serhiy Storchaka added the comment: New changeset 576def096ec7b64814e038f03290031f172886c3 by Serhiy Storchaka in branch 'master': bpo-27863: Fixed multiple crashes in ElementTree. (#765) https://github.com/python/cpython/commit/576def096ec7b64814e038f03290031f172886c3 --

[issue27863] multiple issues in _elementtree module

Changes by Serhiy Storchaka : -- pull_requests: +674 ___ Python tracker ___ ___

[issue27863] multiple issues in _elementtree module

Changes by Serhiy Storchaka : -- dependencies: +various issues due to misuse of PySlice_GetIndicesEx ___ Python tracker ___

[issue27863] multiple issues in _elementtree module

Changes by Xiang Zhang : -- nosy: +xiang.zhang ___ Python tracker ___ ___ Python-bugs-list

[issue27863] multiple issues in _elementtree module

Changes by Eric N. Vander Weele : -- nosy: +ericvw ___ Python tracker ___ ___

[issue27863] multiple issues in _elementtree module

Serhiy Storchaka added the comment: Thank you for your report tehybel. -- assignee: -> serhiy.storchaka nosy: +serhiy.storchaka stage: -> needs patch ___ Python tracker

[issue27863] multiple issues in _elementtree module

Changes by SilentGhost : -- nosy: +eli.bendersky, scoder type: -> behavior ___ Python tracker ___

[issue27863] multiple issues in _elementtree module

New submission from tehybel: I'll describe 7 issues in the /Modules/_elementtree.c module here. They include multiple use-after-frees, type confusions and instances of out-of-bounds array indexing. Issue 1: use-after-free in element_get_text The problematic code looks like this: