Author Rhamphoryncus
Recipients Rhamphoryncus
Date 2007-09-04.05:38:54
SpamBayes Score 0.203023
Marked as misclassified No
Message-id <1188884335.29.0.623763077822.issue1098@psf.upfronthosting.co.za>
In-reply-to
Content 
In the large else branch in decode_unicode (if encoding is not NULL or
"iso-8859-1"), the new string it produces is not nul-terminated.  This
then hits PyUnicode_DecodeUnicodeEscape's octal escape case, which reads
past the end of the string (but would stop if there was a nul there.)

I found this via valgrind.
History
Date User Action Args
2007-09-04 05:38:55Rhamphoryncussetspambayes_score: 0.203023 -> 0.203023
recipients: + Rhamphoryncus
2007-09-04 05:38:55Rhamphoryncussetspambayes_score: 0.203023 -> 0.203023
messageid: <1188884335.29.0.623763077822.issue1098@psf.upfronthosting.co.za>
2007-09-04 05:38:55Rhamphoryncuslinkissue1098 messages
2007-09-04 05:38:54Rhamphoryncuscreate