[New-bugs-announce] [issue35050] Off-by-one bug in AF_ALG

Tue Oct 23 09:00:21 EDT 2018

New submission from Christian Heimes <lists at cheimes.de>:

The error checking code for salg_name and salg_type have an off-by-one bug. It should check that both strings are NUL terminated strings. It's not a security bug, because the Linux kernel ensures that the last byte is a NULL byte.

----------
components: Extension Modules
messages: 328311
nosy: christian.heimes
priority: normal
severity: normal
status: open
title: Off-by-one bug in AF_ALG
type: behavior
versions: Python 3.6, Python 3.7, Python 3.8

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue35050>
_______________________________________