Skip to main content

Browse the archive

Staging
v0.5.1
https://github.com/python/cpython
09 December 2020, 11:06:31 UTC
Revision 09d8172837b6985c4ad90ee025f6b5a554a9f0ac authored by Tapas Kundu on 20 June 2020, 06:43:50 UTC, committed by GitHub on 20 June 2020, 06:43:50 UTC 
[3.5] closes bpo-38576: Disallow control characters in hostnames in http.client. (#19300)
 
Add host validation for control characters for more
CVE-2019-18348 protection.
(cherry picked from commit 83fc70159b24)
1 parent 37fe316
Raw File
Tip revision: 09d8172837b6985c4ad90ee025f6b5a554a9f0ac authored by Tapas Kundu on 20 June 2020, 06:43:50 UTC
[3.5] closes bpo-38576: Disallow control characters in hostnames in http.client. (#19300)
Tip revision: 09d8172
dynload_dl.c 

/* Support for dynamic loading of extension modules */

#include "dl.h"

#include "Python.h"
#include "importdl.h"


extern char *Py_GetProgramName(void);

const char *_PyImport_DynLoadFiletab[] = {".o", NULL};


dl_funcptr _PyImport_FindSharedFuncptr(const char *prefix,
                                       const char *shortname,
                                       const char *pathname, FILE *fp)
{
    char funcname[258];

    PyOS_snprintf(funcname, sizeof(funcname), "%.20s_%.200s", prefix, shortname);
    return dl_loadmod(Py_GetProgramName(), pathname, funcname);
}
back to top