bpo-41471: Ignore invalid prefix lengths in system proxy settings on macOS (GH-22762...

(cherry picked from commit 93a1ccabdede416425473329b8c718d507c55e29)

Co-authored-by: Ronald Oussoren <ronaldoussoren@mac.com>

diff --git a/Lib/test/test_urllib2.py b/Lib/test/test_urllib2.py
index 091b3979aa680c3a8cddf10b3ec3ba0fbd9cce5a..0132059fdb0ad31cd0be71861c981580f91a1c16 100644 (file)
--- a/Lib/test/test_urllib2.py
+++ b/Lib/test/test_urllib2.py
@@ -1444,6 +1444,18 @@ class HandlerTests(unittest.TestCase):
         bypass = {'exclude_simple': True, 'exceptions': []}
         self.assertTrue(_proxy_bypass_macosx_sysconf('test', bypass))
 
+        # Check that invalid prefix lengths are ignored
+        bypass = {
+            'exclude_simple': False,
+            'exceptions': [ '10.0.0.0/40', '172.19.10.0/24' ]
+        }
+        host = '172.19.10.5'
+        self.assertTrue(_proxy_bypass_macosx_sysconf(host, bypass),
+                        'expected bypass of %s to be True' % host)
+        host = '10.0.1.5'
+        self.assertFalse(_proxy_bypass_macosx_sysconf(host, bypass),
+                        'expected bypass of %s to be False' % host)
+
     def check_basic_auth(self, headers, realm):
         with self.subTest(realm=realm, headers=headers):
             opener = OpenerDirector()

diff --git a/Lib/urllib/request.py b/Lib/urllib/request.py
index e44073886a6cd94be262291b1c02f8504134a2ee..afd634159fa82cd43db13bcca0a4a351899cba4c 100644 (file)
--- a/Lib/urllib/request.py
+++ b/Lib/urllib/request.py
@@ -2604,6 +2604,11 @@ def _proxy_bypass_macosx_sysconf(host, proxy_settings):
                 mask = 8 * (m.group(1).count('.') + 1)
             else:
                 mask = int(mask[1:])
+
+            if mask < 0 or mask > 32:
+                # System libraries ignore invalid prefix lengths
+                continue
+
             mask = 32 - mask
 
             if (hostIP >> mask) == (base >> mask):

diff --git a/Misc/NEWS.d/next/macOS/2020-10-19-12-25-19.bpo-41471.gwA7un.rst b/Misc/NEWS.d/next/macOS/2020-10-19-12-25-19.bpo-41471.gwA7un.rst
new file mode 100644 (file)
index 0000000..db5dd00
--- /dev/null
+++ b/Misc/NEWS.d/next/macOS/2020-10-19-12-25-19.bpo-41471.gwA7un.rst
@@ -0,0 +1 @@
+Ignore invalid prefix lengths in system proxy excludes.