[New-bugs-announce] [issue30594] Refcounting mistake in _ssl.c

[Nathaniel Smith]

New submission from Nathaniel Smith:

If you pass a server_hostname= that fails IDNA decoding to SSLContext.wrap_socket or SSLContext.wrap_bio, then the SSLContext object has a spurious Py_DECREF called on it, eventually leading to segfaults.

Demo attached.

----------
assignee: christian.heimes
components: SSL
files: demo.py
messages: 295380
nosy: alex, christian.heimes, dstufft, janssen, njs
priority: normal
severity: normal
status: open
title: Refcounting mistake in _ssl.c
type: crash
versions: Python 2.7, Python 3.5, Python 3.6, Python 3.7
Added file: http://bugs.python.org/file46932/demo.py

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue30594>
_______________________________________