cpython/Lib
Miss Islington (bot) 06b15424b0
bpo-35746: Fix segfault in ssl's cert parser (GH-11569)
Fix a NULL pointer deref in ssl module. The cert parser did not handle CRL
distribution points with empty DP or URI correctly. A malicious or buggy
certificate can result into segfault.

Signed-off-by: Christian Heimes <christian@python.org>

https://bugs.python.org/issue35746
(cherry picked from commit a37f52436f)

Co-authored-by: Christian Heimes <christian@python.org>
2019-01-15 15:11:52 -08:00
..
bsddb bpo-25943: Fix potential heap corruption in bsddb's _db_associateCallback() (GH-8337) 2018-07-21 11:27:44 +03:00
compiler
ctypes bpo-35504: Fix segfaults and SystemErrors when deleting certain attrs. (GH-11175) (GH-11249) 2018-12-20 19:38:52 +02:00
curses fix running the curses.has_key module (closes bpo-33359) (GH-6608) 2018-04-25 22:57:34 -07:00
distutils bpo-10496: distutils check_environ() handles getpwuid() error (GH-10931) (GH-11213) 2018-12-18 17:34:51 +01:00
email bpo-30109: Fix reindent.py for non-ASCII files. (#5637) 2018-02-12 20:16:42 +02:00
encodings
ensurepip Upgrade pip to 18.1 and setuptools to 40.6.2 (GH-10598) 2018-11-19 08:07:58 -05:00
hotshot
idlelib [2.7] bpo-35133: Fix mistakes when concatenate string literals on different lines. (GH-10284) (GH-10335) (GH-10336) 2018-11-05 18:16:26 +02:00
importlib
json Fix py3k warnings in 1/0 in tests. (#4072) 2017-10-22 12:15:41 +03:00
lib-tk [2.7] bpo-35250: Correct argument name "num" -> "btn" in turtle docs. (GH-10565). (GH-10943) 2018-12-05 23:10:36 +02:00
lib2to3 [2.7] bpo-16965: 2to3 now rewrites execfile() to open with rb. (GH-8569) (GH-9890) 2018-10-16 08:46:35 +03:00
logging [2.7] bpo-21149: Workaround a GC finalization bug in logging. (#4368) 2017-11-11 14:48:49 -08:00
msilib
multiprocessing Revert "[2.7] bpo-34172: multiprocessing.Pool leaks resources after being deleted (GH-9686)" (GH-10970) 2018-12-06 01:49:41 +01:00
plat-aix3
plat-aix4
plat-atheos
plat-beos5
plat-darwin
plat-freebsd4
plat-freebsd5
plat-freebsd6
plat-freebsd7
plat-freebsd8
plat-generic
plat-irix5
plat-irix6
plat-linux2
plat-mac
plat-netbsd1
plat-next3
plat-os2emx
plat-riscos
plat-sunos5
plat-unixware7
pydoc_data
site-packages
sqlite3 bpo-35504: Fix segfaults and SystemErrors when deleting certain attrs. (GH-11175) (GH-11249) 2018-12-20 19:38:52 +02:00
test bpo-35746: Fix segfault in ssl's cert parser (GH-11569) 2019-01-15 15:11:52 -08:00
unittest Update TestCase.assertAlmostEqual and assertNotAlmostEqual docstrings. (GH-3998) (GH-4040) 2017-10-18 10:30:05 -07:00
wsgiref Issue #27076: Doc, comment and test function name spelling fixes 2016-05-26 05:28:50 +00:00
xml bpo-35052: Fix handler on xml.dom.minidom.cloneNode() (GH-11061) (GH-11068) 2018-12-10 11:56:54 +01:00
BaseHTTPServer.py
Bastion.py
CGIHTTPServer.py
ConfigParser.py
Cookie.py
DocXMLRPCServer.py
HTMLParser.py
MimeWriter.py
Queue.py
SimpleHTTPServer.py
SimpleXMLRPCServer.py
SocketServer.py bpo-35017, socketserver: don't accept request after shutdown (GH-9952) (GH-10129) 2018-10-26 17:15:22 +02:00
StringIO.py
UserDict.py
UserList.py
UserString.py
_LWPCookieJar.py Fix typos in comments, documentation and test method names 2016-05-08 13:18:25 +00:00
_MozillaCookieJar.py
__future__.py
__phello__.foo.py
_abcoll.py
_osx_support.py
_pyio.py [2.7] bpo-25862: Fix assertion failures in io.TextIOWrapper.tell(). (GH-3918). (GH-8013) 2018-06-29 23:07:13 +03:00
_strptime.py
_threading_local.py Delete a broken threading.local example (GH-5870) 2018-02-25 07:34:46 -08:00
_weakrefset.py
abc.py
aifc.py [2.7] bpo-31848: Fix broken error handling in Aifc_read.initfp() when the SSND chunk is not found (GH-5240) (GH-5781) 2018-02-21 08:37:18 +02:00
antigravity.py
anydbm.py
argparse.py bpo-11874: fix assertion failure in argparse metavar handling (GH-1826) 2018-06-08 18:28:02 -07:00
ast.py
asynchat.py
asyncore.py
atexit.py
audiodev.py
base64.py
bdb.py
binhex.py
bisect.py
cProfile.py [2.7] bpo-23420: Verify the value of '-s' when execute the CLI of cProfile (GH-9925) (GH-9928) 2018-10-17 04:51:28 -07:00
calendar.py
cgi.py bpo-34866: Add max_num_fields to cgi.FieldStorage (GH-9660) (GH-9969) 2018-10-30 22:16:26 +01:00
cgitb.py [2.7] bpo-33256: Replace angle brackets around python object repr to display it in html (GH-6442). (GH-6650) 2018-04-30 11:34:47 +03:00
chunk.py
cmd.py
code.py
codecs.py bpo-32110: codecs.StreamReader.read(n) now returns not more than n (GH-4499) (#4623) 2017-11-29 02:15:43 +02:00
codeop.py
collections.py
colorsys.py
commands.py
compileall.py
contextlib.py
cookielib.py
copy.py
copy_reg.py
csv.py [2.7] bpo-30157: Fix csv.Sniffer.sniff() regex pattern. (GH-5601) (GH-5604) 2018-02-10 00:02:04 +02:00
dbhash.py
decimal.py [2.7] bpo-35133: Fix mistakes when concatenate string literals on different lines. (GH-10284) (GH-10335) (GH-10336) 2018-11-05 18:16:26 +02:00
difflib.py [2.7] bpo-32981: Fix catastrophic backtracking vulns (GH-5955) 2018-03-03 22:18:17 -08:00
dircache.py
dis.py
doctest.py [2.7] bpo-24746: Avoid stripping trailing whitespace in doctest fancy diff (#11482) 2019-01-09 11:03:03 -08:00
dumbdbm.py
dummy_thread.py
dummy_threading.py
filecmp.py
fileinput.py
fnmatch.py
formatter.py
fpformat.py [2.7] closes bpo-32997: Fix REDOS in fpformat (GH-5984) 2018-03-05 21:59:02 -08:00
fractions.py
ftplib.py
functools.py
genericpath.py
getopt.py
getpass.py
gettext.py
glob.py
gzip.py bpo-33038: Fix gzip.GzipFile for file objects with a non-string name attribute. (GH-6095) 2018-05-09 13:14:40 +03:00
hashlib.py
heapq.py
hmac.py backport hmac.compare_digest to partially implement PEP 466 (closes #21306) 2014-05-11 16:11:44 -07:00
htmlentitydefs.py
htmllib.py
httplib.py [2.7] closes bpo-8450: a better error message when http status line isn't received (GH-2825) 2018-09-14 16:28:08 -07:00
ihooks.py
imaplib.py bpo-16039: CVE-2013-1752: Limit imaplib.IMAP4_SSL.readline() (GH-11120) 2018-12-12 12:05:59 +01:00
imghdr.py
imputil.py
inspect.py [2.7] bpo-6700: Fix inspect.getsourcelines for module level frames/tracebacks (GH-8864) 2018-08-26 11:44:53 +03:00
io.py
keyword.py
linecache.py
locale.py [2.7] bpo-20087: Update locale alias mapping with glibc 2.27 supported locales. (GH-6708). (GH-6717) 2018-05-06 10:51:49 +03:00
macpath.py
macurl2path.py
mailbox.py
mailcap.py
markupbase.py
md5.py
mhlib.py
mimetools.py
mimetypes.py [2.7] bpo-31715 Add mimetype for extension .mjs (GH-3908) (GH-10978) 2018-12-20 15:29:34 -05:00
mimify.py
modulefinder.py
multifile.py
mutex.py
netrc.py bpo-30806: Fix netrc.__repr__() format (GH-2491) 2017-12-10 15:09:58 +09:00
new.py
nntplib.py
ntpath.py
nturl2path.py
numbers.py
opcode.py
optparse.py
os.py
os2emxpath.py
pdb.doc
pdb.py
pickle.py
pickletools.py Fix pickletools doc for NEWFALSE. (GH-9432) 2018-09-22 08:38:57 -07:00
pipes.py
pkgutil.py
platform.py bpo-26544: Make platform.libc_ver() less slow (GH-10868) 2018-12-03 16:49:24 +01:00
plistlib.py
popen2.py
poplib.py [2.7] bpo-32981: Fix catastrophic backtracking vulns (GH-5955) 2018-03-03 22:18:17 -08:00
posixfile.py
posixpath.py bpo-10496: posixpath.expanduser() catchs pwd.getpwuid() error (GH-10919) (GH-10930) 2018-12-05 21:56:24 +01:00
pprint.py
profile.py
pstats.py
pty.py
py_compile.py
pyclbr.py
pydoc.py [2.7] bpo-33422: Fix quotation marks getting deleted when looking up byte/string literals on pydoc. (GH-6701) (GH-6712) 2018-05-07 08:44:03 +03:00
quopri.py
random.py
re.py
repr.py
rexec.py
rfc822.py
rlcompleter.py
robotparser.py [2.7] bpo-32861: robotparser fix incomplete __str__ methods. (GH-5711) (GH-6795) (GH-6817) 2018-05-15 01:09:47 +03:00
runpy.py
sched.py
sets.py
sgmllib.py
sha.py
shelve.py
shlex.py
shutil.py [2.7] bpo-34260, shutil: fix copy2 and copystat documentation (GH-8523) (GH-10071) 2018-10-24 23:22:27 +02:00
site.py
smtpd.py
smtplib.py
sndhdr.py
socket.py
sre.py
sre_compile.py
sre_constants.py
sre_parse.py
ssl.py [2.7] bpo-33023: Fix NotImplemented to NotImplementedError. (GH-10934). (GH-11001) (GH-11008) 2018-12-07 08:02:33 +02:00
stat.py
statvfs.py
string.py
stringold.py
stringprep.py
struct.py
subprocess.py
sunau.py
sunaudio.py
symbol.py
symtable.py
sysconfig.py
tabnanny.py
tarfile.py
telnetlib.py bpo-18035: telnetlib: select.error doesn't have an errno attribute (#5044) 2017-12-29 12:44:04 -08:00
tempfile.py
textwrap.py
this.py
threading.py
timeit.py
toaiff.py
token.py
tokenize.py bpo-33899: Revert tokenize module adding an implicit final NEWLINE (GH-10072) 2018-10-24 10:32:21 -07:00
trace.py [2.7] bpo-35133: Fix mistakes when concatenate string literals on different lines. (GH-10284) (GH-10335) (GH-10336) 2018-11-05 18:16:26 +02:00
traceback.py
tty.py
types.py
urllib.py
urllib2.py
urlparse.py bpo-34866: Add max_num_fields to cgi.FieldStorage (GH-9660) (GH-9969) 2018-10-30 22:16:26 +01:00
user.py
uu.py
uuid.py [2.7] bpo-32502: Discard 64-bit (and other invalid) hardware addresses (GH-9125) 2018-09-11 13:54:57 -07:00
warnings.py
wave.py
weakref.py
webbrowser.py [2.7] bpo-34019: Fix wrong arguments for Opera Browser (GH-8047) (#8126) 2018-07-07 00:54:09 +01:00
whichdb.py
wsgiref.egg-info
xdrlib.py
xmllib.py
xmlrpclib.py
zipfile.py [2.7] bpo-34472: Add data descriptor signature to zipfile (GH-8871) (ПР-9407) 2018-09-22 20:48:23 +03:00