Issue #20025: ssl.RAND_bytes() and ssl.RAND_pseudo_bytes() now raise a

ValueError if num is negative (instead of raising a SystemError).
This commit is contained in:
Victor Stinner 2013-12-19 16:47:04 +01:00
parent cb1f74ec40
commit 1e81a399a2
2 changed files with 9 additions and 0 deletions

View file

@ -126,6 +126,10 @@ class BasicSocketTests(unittest.TestCase):
else:
self.assertRaises(ssl.SSLError, ssl.RAND_bytes, 16)
# negative num is invalid
self.assertRaises(ValueError, ssl.RAND_bytes, -5)
self.assertRaises(ValueError, ssl.RAND_pseudo_bytes, -5)
self.assertRaises(TypeError, ssl.RAND_egd, 1)
self.assertRaises(TypeError, ssl.RAND_egd, 'foo', 1)
ssl.RAND_add("this is a random string", 75.0)

View file

@ -2486,6 +2486,11 @@ PySSL_RAND(int len, int pseudo)
const char *errstr;
PyObject *v;
if (len < 0) {
PyErr_SetString(PyExc_ValueError, "num must be positive");
return NULL;
}
bytes = PyBytes_FromStringAndSize(NULL, len);
if (bytes == NULL)
return NULL;