Python 3.5 time_strftime() Buffer Over-Read Vulnerability

Python 3.5 suffers from a vulnerability caused by the behavior of the timestrftime function. When called, the function loops over the format string provided, using strchr to search for each instance of '%'. After finding a '%', it continues to search two characters ahead, assuming that each...

Python 3.5 time_strftime() Buffer Over-Read

Title: Python 3.5 timestrftime Buffer Over-read Credit: John Leitch [email protected], Bryce Darling [email protected] Url1: http://autosectools.com/Page/Python-timestrftime-Buffer-Over-read Url2: http://bugs.python.org/issue24917 Resolution: Fixed Python 3.5 suffers from a vulnerability...

Internet Bug Bounty: time_strftime() Buffer Over-read

http://bugs.python.org/issue24917...