[issue13703] Hash collision security issue

Martin v. Löwis report at bugs.python.org
Fri Jan 27 20:32:11 CET 2012


Martin v. Löwis <martin at v.loewis.de> added the comment:

> I *am* a bit concerned that the possible contents of a dictentry
> change; this could cause easily-missed-in-testing breakage for
> anything that treats table as an array.

This is indeed a concern: the new code needs to be exercised.
I came up with a Py_REDUCE_HASH #define; if set, the dict will only
use the lowest 3 bits of the hash, producing plenty collisions.
In that mode, the branch currently doesn't work at all due to the
remaining bugs.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue13703>
_______________________________________


More information about the Python-bugs-list mailing list