Staging
v0.5.1
https://github.com/python/cpython
Revision cfc7ff8d05f7a949a88b8a8dd506fb5c1c30d3e9 authored by Tapas Kundu on 30 June 2020, 19:30:22 UTC, committed by GitHub on 30 June 2020, 19:30:22 UTC
CVE-2020-14422
The __hash__() methods of classes IPv4Interface and IPv6Interface had issue
of generating constant hash values of 32 and 128 respectively causing hash collisions.
The fix uses the hash() function to generate hash values for the objects
instead of XOR operation
(cherry picked from commit b30ee26e366bf509b7538d79bfec6c6d38d53f28)

Co-authored-by: Ravi Teja P <rvteja92@gmail.com>

Signed-off-by: Tapas Kundu <tkundu@vmware.com>
1 parent 2fce023
History
Tip revision: cfc7ff8d05f7a949a88b8a8dd506fb5c1c30d3e9 authored by Tapas Kundu on 30 June 2020, 19:30:22 UTC
[3.6] bpo-41004: Resolve hash collisions for IPv4Interface and IPv6Interface (GH-21033) (GH-21232)
Tip revision: cfc7ff8
File Mode Size
.azure-pipelines
.github
Doc
Grammar
Include
Lib
Mac
Misc
Modules
Objects
PC
PCbuild
Parser
Programs
Python
Tools
.bzrignore -rw-r--r-- 582 bytes
.gitattributes -rw-r--r-- 1.6 KB
.gitignore -rw-r--r-- 1.4 KB
.hgignore -rw-r--r-- 1.3 KB
.travis.yml -rw-r--r-- 5.1 KB
LICENSE -rw-r--r-- 12.5 KB
Makefile.pre.in -rw-r--r-- 60.0 KB
README.rst -rw-r--r-- 9.6 KB
aclocal.m4 -rw-r--r-- 10.7 KB
config.guess -rwxr-xr-x 43.2 KB
config.sub -rwxr-xr-x 35.7 KB
configure -rwxr-xr-x 482.1 KB
configure.ac -rw-r--r-- 162.5 KB
install-sh -rwxr-xr-x 7.0 KB
pyconfig.h.in -rw-r--r-- 41.1 KB
setup.py -rw-r--r-- 102.4 KB

README.rst

back to top