Skip to content

Conversation

@miss-islington
Copy link
Contributor

@miss-islingtonmiss-islington commented Jul 26, 2022

  • syslog_get_argv() swallows exceptions, but not in all cases.
  • if ident is non UTF-8 encodable, syslog.openlog() fails after setting the
    global reference to ident. Now the C string saved internally in the previous
    call to openlog() points to the freed memory.
  • PySys_Audit() can crash if ident is NULL.
  • There may be a race condition with syslog.syslog(), because the global
    reference to ident is decrefed before setting the new value.
  • Possible use of freed memory if syslog.openlog() is called while
    the GIL is released in syslog.syslog().
    (cherry picked from commit 68c555a)

Co-authored-by: Serhiy Storchaka storchaka@gmail.com

…H-95058) * syslog_get_argv() swallows exceptions, but not in all cases. * if ident is non UTF-8 encodable, syslog.openlog() fails after setting the global reference to ident. Now the C string saved internally in the previous call to openlog() points to the freed memory. * PySys_Audit() can crash if ident is NULL. * There may be a race condition with syslog.syslog(), because the global reference to ident is decrefed before setting the new value. * Possible use of freed memory if syslog.openlog() is called while the GIL is released in syslog.syslog(). (cherry picked from commit 68c555a) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
@miss-islington
Copy link
ContributorAuthor

Status check is done, and it's a success ✅ .

@miss-islington
Copy link
ContributorAuthor

Status check is done, and it's a success ✅ .

@bedevere-botbedevere-bot added skip news type-bug An unexpected behavior, bug, or error awaiting review labels Jul 26, 2022
@miss-islington
Copy link
ContributorAuthor

Status check is done, and it's a success ✅ .

@miss-islington
Copy link
ContributorAuthor

Status check is done, and it's a success ✅ .

@miss-islingtonmiss-islington merged commit dd0c1a3 into python:3.10Jul 26, 2022
@miss-islingtonmiss-islington deleted the backport-68c555a-3.10 branch July 26, 2022 06:35
@erlend-aaslanderlend-aasland mentioned this pull request Jul 26, 2022
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

skip newstype-bugAn unexpected behavior, bug, or error

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@miss-islington@serhiy-storchaka@bedevere-bot