]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-43362: Fix invalid free and return check in _sha3 module (GH-25463)
authorChristian Heimes <christian@python.org>
Sun, 18 Apr 2021 06:39:39 +0000 (08:39 +0200)
committerGitHub <noreply@github.com>
Sun, 18 Apr 2021 06:39:39 +0000 (08:39 +0200)
commitaa6da32edc3c6ddfda5e849561e20273b8d82771
treee543feb59a3d5e30ec01f2408d77dad5099da456
parentf5c5c0c362f84b3af168563ac9dec1d03cf8565a
bpo-43362: Fix invalid free and return check in _sha3 module (GH-25463)

Commit 93d50a6a8d0c5d332c11aef267e66573a09765ac / GH-21855 changed the
order of variable definitions, which introduced a potential invalid free
bug. Py_buffer object is now initialized earlier and the result of
Keccak initialize is verified.

Co-authored-by: Alex Henrie <alexhenrie24@gmail.com>
Signed-off-by: Christian Heimes <christian@python.org>
Co-authored-by: Alex Henrie <alexhenrie24@gmail.com>
Misc/NEWS.d/next/Security/2021-04-18-00-56-44.bpo-43362.__5aiP.rst [new file with mode: 0644]
Modules/_sha3/sha3module.c