[New-bugs-announce] [issue29149] SSL.py recursion limit crash

Sumner Hearth report at bugs.python.org
Wed Jan 4 01:05:07 EST 2017


New submission from Sumner Hearth:

Error in python 3.6 ssl.py:

[...]
File "/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/ssl.py", line 737, in __init__
    self._context.verify_mode = cert_reqs
File "/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/ssl.py", line 479, in verify_mode
    super(SSLContext, SSLContext).verify_mode.__set__(self, value)
File "/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/ssl.py", line 479, in verify_mode
    super(SSLContext, SSLContext).verify_mode.__set__(self, value)
[Repeated]

Crash is infinite recursion on super calls having to do with the verify_mode property

Crash found when creating an SSL context for eventlet with flask-socketio, unfortunately easiest way to reproduce involves installing eventlet, flask, flask-socketio, and pyopenssl. I've included the smallest working example of the crash in python 3.6, attached code works in python 3.5.

Note:
I'm attempting to create a dependency-free version of the file which exhibits the same behavior, it's tricky to unwrap all the libraries leading to the issue. See https://github.com/miguelgrinberg/Flask-SocketIO/issues/193 for original post discovering bug.

----------
assignee: christian.heimes
components: SSL
files: crash.py
messages: 284614
nosy: Sumner Hearth, christian.heimes
priority: normal
severity: normal
status: open
title: SSL.py recursion limit crash
type: crash
versions: Python 3.6
Added file: http://bugs.python.org/file46135/crash.py

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue29149>
_______________________________________


More information about the New-bugs-announce mailing list