Mercurial > cpython-lru_cache-weakref
view Modules/_cryptmodule.c @ 79005:2fa7c104f909
Fix out of bounds read in long_new() for empty bytes with an explicit base. int(b'', somebase) calls PyLong_FromString() with char* of length 1 but the function accesses the first argument at offset 1. CID 715359
| author | Christian Heimes <christian@cheimes.de> |
|---|---|
| date | Wed, 12 Sep 2012 15:32:06 +0200 |
| parents | 372b2ef0ff37 |
| children |
line wrap: on
line source
/* cryptmodule.c - by Steve Majewski */ #include "Python.h" #include <sys/types.h> #ifdef __VMS #include <openssl/des.h> #endif /* Module crypt */ static PyObject *crypt_crypt(PyObject *self, PyObject *args) { char *word, *salt; #ifndef __VMS extern char * crypt(const char *, const char *); #endif if (!PyArg_ParseTuple(args, "ss:crypt", &word, &salt)) { return NULL; } /* On some platforms (AtheOS) crypt returns NULL for an invalid salt. Return None in that case. XXX Maybe raise an exception? */ return Py_BuildValue("s", crypt(word, salt)); } PyDoc_STRVAR(crypt_crypt__doc__, "crypt(word, salt) -> string\n\ word will usually be a user's password. salt is a 2-character string\n\ which will be used to select one of 4096 variations of DES. The characters\n\ in salt must be either \".\", \"/\", or an alphanumeric character. Returns\n\ the hashed password as a string, which will be composed of characters from\n\ the same alphabet as the salt."); static PyMethodDef crypt_methods[] = { {"crypt", crypt_crypt, METH_VARARGS, crypt_crypt__doc__}, {NULL, NULL} /* sentinel */ }; static struct PyModuleDef cryptmodule = { PyModuleDef_HEAD_INIT, "_crypt", NULL, -1, crypt_methods, NULL, NULL, NULL, NULL }; PyMODINIT_FUNC PyInit__crypt(void) { return PyModule_Create(&cryptmodule); }
