Thanks to visit codestin.com
Credit goes to github.com

Skip to content

gh-140594: Fix an out of bounds read when feeding NUL byte to PyOS_StdioReadline #140910

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
vstinner merged 19 commits into from
Mar 12, 2026
+11 −1
Merged

gh-140594: Fix an out of bounds read when feeding NUL byte to PyOS_StdioReadline #140910

Changes from 1 commit
Commits
Show all changes
19 commits
Select commit Hold shift + click to select a range
0463fb7
Fix heap-buffer-overflow when reading null bytes
ashm-dev Nov 2, 2025
71d79ca
Add test for NUL byte in interactive mode
ashm-dev Nov 2, 2025
42fdcfb
test: refactor null byte interactive mode test to use EnvironmentVarG…
ashm-dev Nov 2, 2025
b09a4c8
docs: improve security advisory for PyOS_StdioReadline fix
ashm-dev Nov 2, 2025
976dedb
test: remove unnecessary -S and -q flags from null byte test
ashm-dev Nov 2, 2025
3f4a6be
Update Misc/NEWS.d/next/Security/2025-11-02-16-23-17.gh-issue-140594.…
ashm-dev Nov 2, 2025
2392f76
test: simplify null byte interactive mode test to use spawn_python
ashm-dev Nov 2, 2025
cfd56e6
Update Lib/test/test_cmd_line.py
ashm-dev Nov 2, 2025
2647f02
test: simplify null byte interactive mode test by removing unnecessar…
ashm-dev Nov 2, 2025
11912ec
Merge branch 'main' into asan
ashm-dev Nov 18, 2025
010a482
Merge remote-tracking branch 'upstream/main' into asan
ashm-dev Nov 20, 2025
9dbeba9
fix
ashm-dev Nov 20, 2025
a982737
fix comment
ashm-dev Nov 20, 2025
6f83dc8
fix test docstring
ashm-dev Nov 21, 2025
6ffaace
fix news
ashm-dev Nov 21, 2025
43025bd
Merge branch 'main' into asan
ashm-dev Nov 21, 2025
67895de
Fix wording: out of bounds read, not buffer overflow
ashm-dev Mar 11, 2026
919b64a
Merge branch 'main' into asan
ashm-dev Mar 11, 2026
32226a9
Update Lib/test/test_cmd_line.py
vstinner Mar 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
fix comment
  • Loading branch information
@ashm-dev
ashm-dev committed Nov 20, 2025
commit a9827370dcaebfe578ee596d71580650845b5e98
2 changes: 1 addition & 1 deletion Lib/test/test_cmd_line.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -203,7 +203,7 @@ def test_run_module_bug1764407(self):

@support.cpython_only
def test_null_byte_in_interactive_mode(self):
# gh-140594: heap-buffer-underflow in PyOS_StdioReadline when a NUL (\0)
# gh-140594: heap-buffer-overflow in PyOS_StdioReadline when a NULL
Comment thread
ashm-dev marked this conversation as resolved.
Outdated
# is present in interactive input. The test ensures that feeding a null
# byte to the interactive prompt does not crash the interpreter.
proc = spawn_python('-i')
Expand Down
Loading