[issue11259] asynchat does not check if terminator is negative integer

Марк Коренберг report at bugs.python.org
Sat Mar 5 06:00:45 CET 2011


Марк Коренберг <socketpair at gmail.com> added the comment:

> I've never used negative terminators in asynchat and I'm not even sure why one would want to. 
no one wants :), but terminator numeric value may be achieved from the net, and hackers sometimes use such technique.

attached shorttest.py do the test. If negative terminator is passed, ValueError exception will raise on patched version, and will not raise in unpatched.

Currently, I studying test system for python, but I think you will add such simple test faster and cleaner.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue11259>
_______________________________________


More information about the Python-bugs-list mailing list