Philipp Gesang cb1c0746f2 closes bpo-39510: Fix use-after-free in BufferedReader.readinto() (GH-18295) ... When called on a closed object, readinto() segfaults on account of a write to a freed buffer: ==220553== Process terminating with default action of signal 11 (SIGSEGV): dumping core ==220553== Access not within mapped region at address 0x2A ==220553== at 0x48408A0: memmove (vg_replace_strmem.c:1272) ==220553== by 0x58DB0C: _buffered_readinto_generic (bufferedio.c:972) ==220553== by 0x58DCBA: _io__Buffered_readinto_impl (bufferedio.c:1053) ==220553== by 0x58DCBA: _io__Buffered_readinto (bufferedio.c.h:253) Reproducer: reader = open ("/dev/zero", "rb") _void = reader.read (42) reader.close () reader.readinto (bytearray (42)) ### BANG! The problem exists since 2012 when commit dc469454ec added code to free the read buffer on close(). Signed-off-by: Philipp Gesang <philipp.gesang@intra2net.com>		2020-02-04 13:25:16 -08:00
..
asyncio	bpo-34793: Drop old-style context managers in asyncio.locks (GH-17533)	2020-02-01 13:12:52 +02:00
collections
concurrent	bpo-39349: Add *cancel_futures* to Executor.shutdown() (GH-18057)	2020-02-02 13:49:00 +01:00
ctypes	bpo-16575: Disabled checks for union types being passed by value. (GH-17960)	2020-01-12 08:54:00 +00:00
curses
dbm
distutils	bpo-39432: Implement PEP-489 algorithm for non-ascii "PyInit_*" symbol names in distutils (GH-18150)	2020-02-04 07:24:30 -08:00
email
encodings
ensurepip
html
http	bpo-35292: Avoid calling mimetypes.init when http.server is imported (GH-17822)	2020-01-08 10:28:14 -08:00
idlelib	bpo-38792: Remove IDLE shell calltip before new prompt. (#17150)	2020-01-30 20:55:42 -05:00
importlib	bpo-39320: Handle unpacking of **values in compiler (GH-18141)	2020-01-27 09:57:45 +00:00
json	bpo-39377: json: Remove the encoding option. (GH-18075)	2020-01-20 13:54:00 +09:00
lib2to3	bpo-39313: Add an option to RefactoringTool for using exec as a function (GH-17967)	2020-01-12 14:13:31 -08:00
logging	bpo-39292: Add missing syslog facility codes. (GH-17945)	2020-01-10 19:37:48 +00:00
msilib
multiprocessing	bpo-39439: Fix multiprocessing spawn path in a venv on Windows (GH-18158)	2020-01-28 21:34:23 +11:00
pydoc_data	Python 3.9.0a3	2020-01-24 22:05:07 +01:00
site-packages
sqlite3
test	closes bpo-39510: Fix use-after-free in BufferedReader.readinto() (GH-18295)	2020-02-04 13:25:16 -08:00
tkinter	bpo-39152: add missing ttk.Scale.configure return value (GH-17815)	2020-01-05 11:23:58 -05:00
turtledemo
unittest	bpo-39450 Stripped whitespace before parsing the docstring in TestCase.shortDescription (GH-18175)	2020-02-03 07:06:50 +00:00
urllib	bpo-39057: Fix urllib.request.proxy_bypass_environment(). (GH-17619)	2020-01-05 14:14:31 +02:00
venv	bpo-38901: Allow setting a venv's prompt to the basename of the current directory. (GH-17946)	2020-01-14 20:49:30 +00:00
wsgiref
xml
xmlrpc
__future__.py
__phello__.foo.py
_aix_support.py	bpo-38021: Modify AIX platform_tag so it covers PEP 425 needs (GH-17303)	2019-12-16 00:17:53 +10:00
_bootlocale.py
_collections_abc.py
_compat_pickle.py
_compression.py
_markupbase.py
_osx_support.py
_py_abc.py
_pydecimal.py
_pyio.py
_sitebuiltins.py
_strptime.py	Fix outdated comment in _strptime.py (GH-17929)	2020-01-12 12:53:00 -08:00
_threading_local.py
_weakrefset.py
abc.py
aifc.py
antigravity.py
argparse.py
ast.py	bpo-39158: ast.literal_eval() doesn't support empty sets (GH-17742)	2020-01-02 22:21:18 -07:00
asynchat.py
asyncore.py
base64.py	bpo-39351: Remove base64.encodestring() (GH-18022)	2020-01-16 10:24:16 +01:00
bdb.py
binhex.py	bpo-39353: binascii.crc_hqx() is no longer deprecated (GH-18276)	2020-01-30 09:56:40 +01:00
bisect.py
bz2.py	bpo-39357: Update bz2 docstring: remove buffering (GH-18036)	2020-01-17 13:50:39 +01:00
calendar.py
cgi.py
cgitb.py
chunk.py
cmd.py
code.py	Fix documentation in code.py (GH-17988)	2020-01-15 01:17:25 +05:30
codecs.py
codeop.py
colorsys.py
compileall.py
configparser.py
contextlib.py
contextvars.py
copy.py	bpo-38293: Allow shallow and deep copying of property objects (GH-16438)	2020-01-12 09:41:49 -08:00
copyreg.py
cProfile.py
crypt.py
csv.py
dataclasses.py
datetime.py
decimal.py
difflib.py
dis.py
doctest.py	bpo-36406: Handle namespace packages in doctest (GH-12520)	2019-12-13 10:06:53 -08:00
enum.py
filecmp.py
fileinput.py
fnmatch.py
formatter.py
fractions.py	bpo-39350: Remove deprecated fractions.gcd() (GH-18021)	2020-01-16 11:02:51 +01:00
ftplib.py	bpo-39259: ftplib.FTP/FTP_TLS now reject timeout = 0 (GH-17959)	2020-01-13 20:34:34 +01:00
functools.py	bpo-17005: Add a class to perform topological sorting to the standard library (GH-11583)	2020-01-23 15:29:52 +00:00
genericpath.py
getopt.py
getpass.py
gettext.py
glob.py
gzip.py	bpo-39389: gzip: fix compression level metadata (GH-18077)	2020-01-21 13:25:24 +02:00
hashlib.py
heapq.py
hmac.py
imaplib.py	bpo-38615: Add timeout parameter for IMAP4 and IMAP4_SSL constructor (GH-17203)	2020-01-07 18:28:10 +01:00
imghdr.py
imp.py
inspect.py	bpo-36350: inspect: Replace OrderedDict with dict. (GH-12412)	2020-01-28 21:47:03 +09:00
io.py
ipaddress.py
keyword.py
linecache.py	Fix linecache.py add lazycache to __all__ and use dict.clear to clear the cache (GH-4641)	2020-01-25 21:07:40 -05:00
locale.py	bpo-38536: locale: Remove trailing space in formatted currency (GH-16864)	2020-01-20 12:45:50 +09:00
lzma.py
mailbox.py
mailcap.py
mimetypes.py	bpo-39299: Add more tests for mimetypes and its cli. (GH-17949)	2020-01-13 20:09:36 +05:30
modulefinder.py
netrc.py
nntplib.py	bpo-39366: Remove xpath() and xgtitle() methods of NNTP (GH-18035)	2020-01-23 00:59:43 +03:00
ntpath.py
nturl2path.py
numbers.py
opcode.py	bpo-39320: Handle unpacking of **values in compiler (GH-18141)	2020-01-27 09:57:45 +00:00
operator.py
optparse.py
os.py	bpo-39395: putenv() and unsetenv() always available (GH-18135)	2020-01-24 14:05:48 +01:00
pathlib.py	bpo-38883: Don't use POSIX $HOME in pathlib.Path.home/expanduser on Windows (GH-17961)	2020-01-28 20:41:50 +11:00
pdb.py
pickle.py	bpo-39426: Fix outdated default and highest protocols in docs (GH-18154)	2020-01-24 02:03:22 -08:00
pickletools.py
pipes.py
pkgutil.py
platform.py
plistlib.py
poplib.py	bpo-39259: poplib now rejects timeout = 0 (GH-17912)	2020-01-10 15:34:05 +01:00
posixpath.py
pprint.py
profile.py
pstats.py	bpo-37958: Adding get_profile_dict to pstats (GH-15495)	2020-01-15 14:51:54 -08:00
pty.py
py_compile.py
pyclbr.py
pydoc.py
queue.py
quopri.py
random.py
re.py
reprlib.py
rlcompleter.py
runpy.py
sched.py
secrets.py
selectors.py
shelve.py
shlex.py
shutil.py	bpo-39390 shutil: fix argument types for ignore callback (GH-18122)	2020-01-24 15:51:16 +01:00
signal.py
site.py	Fix typo in site module (GH-17597)	2019-12-14 10:37:58 +00:00
smtpd.py
smtplib.py	bpo-39329: Add timeout parameter for smtplib.LMTP constructor (GH-17998)	2020-01-14 22:42:09 +01:00
sndhdr.py
socket.py	Fix host in address of socket.create_server example. (GH-17706)	2020-01-11 10:46:30 +05:30
socketserver.py
sre_compile.py
sre_constants.py
sre_parse.py
ssl.py
stat.py
statistics.py
string.py
stringprep.py
struct.py
subprocess.py	bpo-39489: Remove COUNT_ALLOCS special build (GH-18259)	2020-02-03 15:17:15 +01:00
sunau.py
symbol.py
symtable.py
sysconfig.py	bpo-38021: Modify AIX platform_tag so it covers PEP 425 needs (GH-17303)	2019-12-16 00:17:53 +10:00
tabnanny.py
tarfile.py	bpo-39430: Fix race condition in lazy imports in tarfile. (GH-18161)	2020-01-24 09:55:52 -08:00
telnetlib.py
tempfile.py	bpo-39019: Implement missing __class_getitem__ for SpooledTemporaryFile (GH-17560)	2019-12-30 16:08:08 +00:00
textwrap.py
this.py
threading.py
timeit.py
token.py
tokenize.py
trace.py
traceback.py
tracemalloc.py
tty.py
turtle.py
types.py
typing.py	bpo-39493: Fix definition of IO.closed in typing.py (#18265)	2020-01-29 18:52:36 -08:00
uu.py
uuid.py
warnings.py	bpo-39056: Fix handling invalid warning category in the -W option. (GH-17618)	2020-01-05 14:15:27 +02:00
wave.py
weakref.py
webbrowser.py	Fix typo from base to based (GH-18055)	2020-01-19 05:29:42 -05:00
xdrlib.py
zipapp.py
zipfile.py	bpo-39356, zipfile: Remove code handling DeprecationWarning (GH-18027)	2020-01-17 15:17:48 +01:00
zipimport.py	bpo-39033: Fix NameError in zipimport during hash validation (GH-17588)	2019-12-16 09:34:12 +10:00