Skip to content

Conversation

@izbyshev
Copy link
Contributor

@izbyshev izbyshev commented Aug 21, 2018

The missing NULL check was reported by Svace static analyzer.

https://bugs.python.org/issue34454

The missing NULL check was reported by Svace static analyzer.

with self.subTest(dtstr=dtstr):
dt_rt = self.theclass.fromisoformat(dtstr)
try:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think this try/catch is the right solution here. We should fix the actual problem.

@taleinat
Copy link
Contributor

@izbyshev, now that #8862 has been merged, please update this accordingly and merge master into it.

@izbyshev
Copy link
Contributor Author

@taleinat Should I create another bpo for the updated PR?

@taleinat
Copy link
Contributor

taleinat commented Aug 23, 2018

@izbyshev, yes, please create a new issue on bpo, with a title regarding the null dereference bugs, and mark it as a security issue. Do mention there that this bug existed and was recently fixed in the fromisoformat methods, referencing the existing bpo issue.

@izbyshev
Copy link
Contributor Author

izbyshev commented Aug 23, 2018

I've created bpo-34482 and #8878. Closing this one. Thank you!

@izbyshev izbyshev closed this Aug 23, 2018
@izbyshev izbyshev deleted the bpo-34454 branch August 23, 2018 17:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

awaiting review type-bug An unexpected behavior, bug, or error

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants