[New-bugs-announce] [issue10829] PyUnicode_FromFormatV() bugs with "%" and "%%" format strings
STINNER Victor
report at bugs.python.org
Wed Jan 5 01:46:43 CET 2011
New submission from STINNER Victor <victor.stinner at haypocalc.com>:
Steps 1 and 3 of PyUnicode_FromFormatV() doesn't handle the format string "%%" correctly. The loop responsible to skip the precision moves outside the format string, and the function will then read uninitialized memory. The loop:
while (*++f && *f != '%' && !Py_ISALPHA((unsigned)*f))
;
This is another issue:
for (f = format; *f; f++) {
if (*f == '%') {
if (*(f+1)=='%')
continue;
...
continue only skips the first %: with "%%", the second % will be interpreted (and not escaped).
Attached patch fixes the issue, but I don't feal confortable with this ugly function, and I would appreciate a review :-) The patch adds unit tests.
I found the bug when trying to add new tests before trying to implement "%zi" format. I was first surprised that "%zi" (and %li and %lli) is not supported, but now I am surprised because I found bugs :-)
----------
components: Interpreter Core, Unicode
files: pyunicode_fromformatv.patch
keywords: patch
messages: 125387
nosy: amaury.forgeotdarc, haypo
priority: normal
severity: normal
status: open
title: PyUnicode_FromFormatV() bugs with "%" and "%%" format strings
versions: Python 2.6, Python 2.7, Python 3.1, Python 3.2
Added file: http://bugs.python.org/file20262/pyunicode_fromformatv.patch
_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue10829>
_______________________________________
More information about the New-bugs-announce
mailing list