From fd08e4c9edf63590c23ffb6f68c43d5015078c0b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Walter=20D=C3=B6rwald?= Date: Mon, 2 Sep 2002 16:10:06 +0000 Subject: [PATCH] Limit the length of attribute names in exception messages to prevent buffer overflows (spotted by Neal Norwitz). --- Python/exceptions.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Python/exceptions.c b/Python/exceptions.c index 1667cd9b66a..47a4e4d09cf 100644 --- a/Python/exceptions.c +++ b/Python/exceptions.c @@ -852,7 +852,7 @@ int get_int(PyObject *exc, const char *name, int *value) if (!attr) return -1; if (!PyInt_Check(attr)) { - PyErr_Format(PyExc_TypeError, "%s attribute must be int", name); + PyErr_Format(PyExc_TypeError, "%.200s attribute must be int", name); Py_DECREF(attr); return -1; } @@ -884,7 +884,7 @@ PyObject *get_string(PyObject *exc, const char *name) if (!attr) return NULL; if (!PyString_Check(attr)) { - PyErr_Format(PyExc_TypeError, "%s attribute must be str", name); + PyErr_Format(PyExc_TypeError, "%.200s attribute must be str", name); Py_DECREF(attr); return NULL; } @@ -914,7 +914,7 @@ PyObject *get_unicode(PyObject *exc, const char *name) if (!attr) return NULL; if (!PyUnicode_Check(attr)) { - PyErr_Format(PyExc_TypeError, "%s attribute must be unicode", name); + PyErr_Format(PyExc_TypeError, "%.200s attribute must be unicode", name); Py_DECREF(attr); return NULL; }