]> git.ipfire.org Git - thirdparty/Python/cpython.git/commitdiff
[3.14] gh-144023: Prevent `follow_symlinks` from being allowed with an fd of 0 (GH...
authorStan Ulbrych <89152624+StanFromIreland@users.noreply.github.com>
Thu, 22 Jan 2026 15:53:02 +0000 (15:53 +0000)
committerGitHub <noreply@github.com>
Thu, 22 Jan 2026 15:53:02 +0000 (15:53 +0000)
[3.14] gh-144023: Prevent follow_symlinks from being allowed with an fd of 0 (GH-144022)

The check was (fd > 0), should be (fd >= 0).
(cherry picked from commit fa44efa0ef1972ac1e2f66996303154be11f605e)

Co-authored-by: AZero13 <gfunni234@gmail.com>
Lib/test/test_posix.py
Misc/NEWS.d/next/Library/2026-01-19-00-57-40.gh-issue-144023.29XUcp.rst [new file with mode: 0644]
Modules/posixmodule.c

index aad6fc6b4b619b21fd7a536e0e0859c15a270af3..f51cdd26df7da5d381c37791e94dfc6f488efc79 100644 (file)
@@ -668,6 +668,18 @@ class PosixTester(unittest.TestCase):
         finally:
             fp.close()
 
+    @unittest.skipUnless(hasattr(posix, 'stat'),
+                         'test needs posix.stat()')
+    @unittest.skipUnless(os.stat in os.supports_follow_symlinks,
+                         'test needs follow_symlinks support in os.stat()')
+    def test_stat_fd_zero_follow_symlinks(self):
+        with self.assertRaisesRegex(ValueError,
+                'cannot use fd and follow_symlinks together'):
+            posix.stat(0, follow_symlinks=False)
+        with self.assertRaisesRegex(ValueError,
+                'cannot use fd and follow_symlinks together'):
+            posix.stat(1, follow_symlinks=False)
+
     def test_stat(self):
         self.assertTrue(posix.stat(os_helper.TESTFN))
         self.assertTrue(posix.stat(os.fsencode(os_helper.TESTFN)))
diff --git a/Misc/NEWS.d/next/Library/2026-01-19-00-57-40.gh-issue-144023.29XUcp.rst b/Misc/NEWS.d/next/Library/2026-01-19-00-57-40.gh-issue-144023.29XUcp.rst
new file mode 100644 (file)
index 0000000..0d06506
--- /dev/null
@@ -0,0 +1,2 @@
+Fixed validation of file descriptor 0 in posix functions when used with
+follow_symlinks parameter.
index 17d633745db30f3edb4b75cbac7036c46f9cd7fa..cb3a62d211ac558b060c48189309a458dcc9ace8 100644 (file)
@@ -1608,7 +1608,7 @@ static int
 fd_and_follow_symlinks_invalid(const char *function_name, int fd,
                                int follow_symlinks)
 {
-    if ((fd > 0) && (!follow_symlinks)) {
+    if ((fd >= 0) && (!follow_symlinks)) {
         PyErr_Format(PyExc_ValueError,
                      "%s: cannot use fd and follow_symlinks together",
                      function_name);