GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing github.com — `Unpacker.unpack()` segfaults after an incomplete `skip()` · Issue #734 · msgpack/msgpack-python Closed DescriptionSummaryWhen Versionsmsgpack 1.2.2, CPython 3.12.3, Ubuntu 24.04 x86_64, glibc 2.39. Reproducerimport msgpack unpacker = msgpack.Unpacker() unpacker.feed(b"\x91") try: unpacker.skip() except msgpack.OutOfData: pass unpacker.feed(b"\x00") unpacker.unpack() Running it produces: $ python reproducer.py Segmentation fault (core dumped) For comparison, calling import msgpack # Incomplete skip() followed by skip() skip_again = msgpack.Unpacker() skip_again.feed(b"\x91") try: skip_again.skip() except msgpack.OutOfData: pass skip_again.feed(b"\x00") assert skip_again.skip() is None # Incomplete unpack() followed by unpack() unpack_again = msgpack.Unpacker() unpack_again.feed(b"\x91") try: unpack_again.unpack() except msgpack.OutOfData: pass unpack_again.feed(b"\x00") assert unpack_again.unpack() == [0] The crash occurs specifically when the operation changes from an incomplete I found this while fuzzing Python C extension modules. Activity
MetadataMetadataAssigneesLabelsNo labels TypeProjectsMilestoneRelationshipsDevelopmentIssue actions |
| You are visitor 01402503 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |