Message277427
| Author |
christian.heimes |
| Recipients |
Andrey Wagin, benjamin.peterson, berker.peksag, christian.heimes, martin.panter |
| Date |
2016年09月26日.14:59:57 |
| SpamBayes Score |
-1.0 |
| Marked as misclassified |
Yes |
| Message-id |
<1474901997.61.0.0701696620248.issue24933@psf.upfronthosting.co.za> |
| In-reply-to |
| Content |
MSG_TRUNC literally causes a buffer overflow. In the example sock_recv() and friends only allocate a buffer of size 1 on the heap. With MSG_TRUNC recv() ignores the maximum size and writes beyond the buffer. We cannot recover from a buffer overflow because the overflow might have damanged other data structures. Instead Python should detect the problem and forcefully abort() the process with Py_FatalError(). |
|