Skip to content

gh-148808: Add boundary check to asyncio.AbstractEventLoop.sock_recvf…#148809

Merged
gvanrossum merged 4 commits intopython:mainfrom
sethmlarson:asyncio-recvfrom-into-buffer
Apr 21, 2026
Merged

gh-148808: Add boundary check to asyncio.AbstractEventLoop.sock_recvf…#148809
gvanrossum merged 4 commits intopython:mainfrom
sethmlarson:asyncio-recvfrom-into-buffer

Conversation

@sethmlarson
Copy link
Copy Markdown
Contributor

@sethmlarson sethmlarson commented Apr 20, 2026 •
edited by bedevere-app Bot
Loading

@sethmlarson @GGAutomaton @vstinner
pythongh-148808: Add boundary check to asyncio.AbstractEventLoop.sock…
b578d9a 
…_recvfrom_into()

Co-authored-by: null <32899400+GGAutomaton@users.noreply.github.com>
Co-authored-by: Victor Stinner <194129+vstinner@users.noreply.github.com>
@bedevere-app bedevere-app Bot mentioned this pull request Apr 20, 2026
Open
@sethmlarson sethmlarson added the type-security A security issue label Apr 20, 2026
StanFromIreland
StanFromIreland reviewed Apr 20, 2026
View reviewed changes
Comment thread Misc/NEWS.d/next/Security/2026-04-20-15-31-37.gh-issue-148808._Z8JL0.rst Outdated
@sethmlarson sethmlarson requested a review from vstinner April 21, 2026 13:51
@kumaraditya303
Copy link
Copy Markdown
Contributor

kumaraditya303 commented Apr 21, 2026

cc @python/asyncio for a review.

Why pinging the old asyncio team for review which is not relevant now? if you want a review on an asyncio PR, you should ping me or Guido directly.

@sethmlarson
Copy link
Copy Markdown
Contributor Author

sethmlarson commented Apr 21, 2026

@kumaraditya303 Apologies, I did not know that this team was retired. Maybe it can be deleted if it's not meant to be used any more?

@gvanrossum gvanrossum merged commit 1274766 into python:main Apr 21, 2026
54 checks passed
@sethmlarson sethmlarson added needs backport to 3.11 only security fixes needs backport to 3.12 only security fixes needs backport to 3.13 bugs and security fixes needs backport to 3.14 bugs and security fixes labels Apr 21, 2026
@miss-islington-app
Copy link
Copy Markdown

miss-islington-app Bot commented Apr 21, 2026

Thanks @sethmlarson for the PR, and @gvanrossum for merging it 🌮🎉.. I'm working now to backport this PR to: 3.11.
🐍🍒⛏🤖

@miss-islington-app
Copy link
Copy Markdown

miss-islington-app Bot commented Apr 21, 2026

Thanks @sethmlarson for the PR, and @gvanrossum for merging it 🌮🎉.. I'm working now to backport this PR to: 3.12.
🐍🍒⛏🤖

@miss-islington-app
Copy link
Copy Markdown

miss-islington-app Bot commented Apr 21, 2026

Thanks @sethmlarson for the PR, and @gvanrossum for merging it 🌮🎉.. I'm working now to backport this PR to: 3.13.
🐍🍒⛏🤖

@miss-islington-app
Copy link
Copy Markdown

miss-islington-app Bot commented Apr 21, 2026

Thanks @sethmlarson for the PR, and @gvanrossum for merging it 🌮🎉.. I'm working now to backport this PR to: 3.14.
🐍🍒⛏🤖

@bedevere-app
Copy link
Copy Markdown

bedevere-app Bot commented Apr 21, 2026

GH-148834 is a backport of this pull request to the 3.11 branch.

@bedevere-app bedevere-app Bot removed the needs backport to 3.11 only security fixes label Apr 21, 2026
@bedevere-app
Copy link
Copy Markdown

bedevere-app Bot commented Apr 21, 2026

GH-148835 is a backport of this pull request to the 3.12 branch.

@bedevere-app bedevere-app Bot removed the needs backport to 3.12 only security fixes label Apr 21, 2026
@bedevere-app
Copy link
Copy Markdown

bedevere-app Bot commented Apr 21, 2026

GH-148836 is a backport of this pull request to the 3.13 branch.

@bedevere-app bedevere-app Bot removed the needs backport to 3.13 bugs and security fixes label Apr 21, 2026
@bedevere-app
Copy link
Copy Markdown

bedevere-app Bot commented Apr 21, 2026

GH-148837 is a backport of this pull request to the 3.14 branch.

@bedevere-app bedevere-app Bot removed the needs backport to 3.14 bugs and security fixes label Apr 21, 2026
kumaraditya303 pushed a commit that referenced this pull request Apr 21, 2026
@miss-islington @sethmlarson
[3.14] gh-148808: Add boundary check to asyncio.AbstractEventLoop.soc…
27522b7 
…k_recvf… (GH-148809) (#148837)

gh-148808: Add boundary check to asyncio.AbstractEventLoop.sock_recvf… (GH-148809)
(cherry picked from commit 1274766)

Co-authored-by: Seth Larson <seth@python.org>
kumaraditya303 pushed a commit that referenced this pull request Apr 21, 2026
@miss-islington @sethmlarson
[3.13] gh-148808: Add boundary check to asyncio.AbstractEventLoop.soc…
95633d2 
…k_recvf… (GH-148809) (#148836)

gh-148808: Add boundary check to asyncio.AbstractEventLoop.sock_recvf… (GH-148809)
(cherry picked from commit 1274766)

Co-authored-by: Seth Larson <seth@python.org>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@StanFromIreland StanFromIreland StanFromIreland left review comments

@gvanrossum gvanrossum gvanrossum approved these changes

@1st1 1st1 Awaiting requested review from 1st1 1st1 is a code owner

@asvetlov asvetlov Awaiting requested review from asvetlov asvetlov is a code owner

@kumaraditya303 kumaraditya303 Awaiting requested review from kumaraditya303 kumaraditya303 is a code owner

@willingc willingc Awaiting requested review from willingc willingc is a code owner

@vstinner vstinner Awaiting requested review from vstinner

Assignees

No one assigned

Labels

type-security A security issue

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@sethmlarson @kumaraditya303 @gvanrossum @StanFromIreland