rustsec/advisory-db
1
0
Fork 0
mirror of https://github.com/rustsec/advisory-db.git synced 2026-07-22 01:06:54 -04:00
Code Issues Packages Projects Releases Wiki Activity

add upper bounds to (patched) affected functions in PyO3 nth_back report

Browse Source
This commit is contained in:
David Hewitt
2026-06-11 22:22:10 +01:00
committed by Adam Harvey
parent ad0ae0d922
commit 343f397d14
1 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
crates/pyo3/RUSTSEC-2026-0176.md
View File

@@ -8,10 +8,10 @@ categories = ["memory-exposure"]
keywords = ["out-of-bounds-read", "integer-overflow"]
[affected.functions]
"pyo3::types::list::BoundListIterator::nth" = [">= 0.24.0"]
"pyo3::types::list::BoundListIterator::nth_back" = [">= 0.24.0"]
"pyo3::types::tuple::BoundTupleIterator::nth" = [">= 0.24.0"]
"pyo3::types::tuple::BoundTupleIterator::nth_back" = [">= 0.24.0"]
"pyo3::types::list::BoundListIterator::nth" = [">= 0.24.0, < 0.29.0"]
"pyo3::types::list::BoundListIterator::nth_back" = [">= 0.24.0, < 0.29.0"]
"pyo3::types::tuple::BoundTupleIterator::nth" = [">= 0.24.0, < 0.29.0"]
"pyo3::types::tuple::BoundTupleIterator::nth_back" = [">= 0.24.0, < 0.29.0"]
[versions]
patched = [">= 0.29.0"]
@@ -34,3 +34,6 @@ of the `list` or `tuple` of elements previously yielded by the iterator.
In `nth_back` methods, a sufficiently large `n` could cause underflow in a
similar fashion, however would instead allow reads of arbitrary memory past
the end of the `list` or `tuple` storage.
PyO3 0.29.0 has corrected these methods to use checked arithmetic at the
positions which could be at risk of overflow.