Skip to main content

Browse the archive

Staging
v0.5.1
https://github.com/python/cpython
09 December 2020, 11:06:31 UTC
Revision 788d7bfe189e715eab3855c20ea5d6da0d8bed70 authored by Miss Islington (bot) on 27 May 2020, 15:46:57 UTC, committed by GitHub on 27 May 2020, 15:46:57 UTC 
bpo-13097: ctypes: limit callback to 1024 arguments (GH-19914)
 

ctypes now raises an ArgumentError when a callback
is invoked with more than 1024 arguments.

The ctypes module allocates arguments on the stack in
ctypes_callproc() using alloca(), which is problematic
when large numbers of arguments are passed. Instead
of a stack overflow, this commit raises an ArgumentError
if more than 1024 parameters are passed.
(cherry picked from commit 29a1384c040d39659e7d01f1fd7b6eb71ef2634e)

Co-authored-by: Sean Gillespie <sean@swgillespie.me>
1 parent 43fccb1
Raw File
Tip revision: 788d7bfe189e715eab3855c20ea5d6da0d8bed70 authored by Miss Islington (bot) on 27 May 2020, 15:46:57 UTC
bpo-13097: ctypes: limit callback to 1024 arguments (GH-19914)
Tip revision: 788d7bf
README.coverity 

Coverity has a static analysis tool (Prevent) which is similar to Klocwork.
They run their tool on the Python source code (SVN head) on a daily basis.
The results are available at:

     http://scan.coverity.com/

About 20 people have access to the analysis reports.  Other
people can be added by request.

Prevent was first run on the Python 2.5 source code in March 2006.
There were originally about 100 defects reported.  Some of these
were false positives.  Over 70 issues were uncovered.

Each warning has a unique id and comments that can be made on it.
When checking in changes due to a warning, the unique id
as reported by the tool was added to the SVN commit message.

False positives were annotated so that the comments can
be reviewed and reversed if the analysis was incorrect.

Contact python-dev@python.org for more information.
back to top