Message 333825 - Python tracker

➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author	kevans
Recipients	gregory.p.smith, izbyshev, kevans, koobs, nanjekyejoannah, pablogsal, serhiy.storchaka, vstinner
Date	2019-01-17.06:42:39
SpamBayes Score	-1.0
Marked as misclassified	Yes
Message-id	<1547707359.49.0.040165382943.issue35537@roundup.psfhosted.org>
In-reply-to

Content
I'll be preparing a patch for our posix_spawn's signal handling. My mistake in my setuid assessment was pointed out to me- it doesn't seem like a highly likely attack vector, but it is indeed possible. If the child errored out, they will indeed be properly reapable at that point due to how vfork is implemented -- any observation to the contrary is to be considered a bug.

I'll be preparing a patch for our posix_spawn's signal handling.

My mistake in my setuid assessment was pointed out to me- it doesn't seem like a highly likely attack vector, but it is indeed possible.

If the child errored out, they will indeed be properly reapable at that point due to how vfork is implemented -- any observation to the contrary is to be considered a bug.

History
Date	User	Action	Args
2019-01-17 06:42:40	kevans	set	recipients: + kevans, gregory.p.smith, vstinner, serhiy.storchaka, koobs, izbyshev, pablogsal, nanjekyejoannah
2019-01-17 06:42:39	kevans	set	messageid: <1547707359.49.0.040165382943.issue35537@roundup.psfhosted.org>
2019-01-17 06:42:39	kevans	link	issue35537 messages
2019-01-17 06:42:39	kevans	create