Skip to content

Conversation

@frenzymadness
Copy link
Contributor

@frenzymadnessfrenzymadness commented Oct 11, 2023

The new class is part of the fix for CVE-2023-40217: b4bcc06 but it's not in the lists of tests so they're not
executed. The new tests also need SHORT_TIMEOUT
constant not available in test.support in 3.8.

I'm using the original issue here as this change fixes the original testsuite for the CVE in TLS.

An alternative for having the constant in test_ssl is to backport this commit from 3.9: 24c6258 But it touches a lot of files and I think that might be too much for 3.8.

Cc the authors of the original fix: @ambv and @gpshead

The new class is part of the fix for CVE-2023-40217: python@b4bcc06 but it's not in the lists of tests so they're not executed. The new tests also need `SHORT_TIMEOUT` constant not available in test.support in 3.8.
@bedevere-appbedevere-appbot added tests Tests in the Lib/test dir awaiting review labels Oct 11, 2023
@ambvambv changed the title gh-108310: Fix TestPreHandshakeClose tests in test_ssl[3.8] gh-108310: Fix TestPreHandshakeClose tests in test_sslOct 11, 2023
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

testsTests in the Lib/test dir

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@frenzymadness@gpshead@ambv