DragonFly users List (threaded) for 2008-10
DragonFly BSD
DragonFly users List (threaded) for 2008-10
[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]

Re: python mktime fails with overflow (same call works in other environments)


From: Matthew Dillon <dillon@xxxxxxxxxxxxxxxxxxxx>
Date: Wed, 15 Oct 2008 16:48:53 -0700 (PDT)

:I've posted a tzcode upgrade to submit@.
:
:http://leaf.dragonflybsd.org/mailarchive/submit/2008-10/msg00001.html
:
:Could you guys test if it fixes the Python issue?
:
:Thanks,
:Sascha
:
:-- 
:http://yoyodyne.ath.cx

    The patch looks reasonable though the sprintf's need to be
    turned into snprintf's.  In particular the string looks vulnerable
    to user code that might populate bad values into timeptr.

    There are numerous strcpy's in the code too but I don't know how
    vulnerable those are to the outside.

					-Matt
					Matthew Dillon 
					<dillon@backplane.com>



[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]