Re: Is python buffer overflow proof?

Marcus Wanner schrieb:
> On 8/2/2009 10:43 AM, Christian Heimes wrote:
>> Marcus Wanner wrote:
>>> I believe that python is buffer overflow proof. In fact, I think that
>>> even ctypes is overflow proof...
>>
>> No, ctypes isn't buffer overflow proof. ctypes can break and crash a
>> Python interpreter easily.
>>
>> Christian
>>
> I see. I thought that it said "invalid array index" when you try to
> read/write outside of an array's bounds, though...


But you can cast the resulting pointer to an array of larger size, and
there you are.

Diez

Diez B. Roggisch

Marcus Wanner wrote:
> On 8/3/2009 3:45 AM, Diez B. Roggisch wrote:
>> But you can cast the resulting pointer to an array of larger size, and
>> there you are.
>
> Ah, that makes sense. I had forgotten about ctypes.cast().

You *can* shoot yourself in the foot with Python, you just have
to aim much more carefully than you do with C/C++.

-tkc

Tim Chase

On Aug 4, 2:27*pm, Tim Chase <python.l...@tim.thechases.com> wrote:

> You *can* shoot yourself in the foot with Python, you just have
> to aim much more carefully than you do with C/C++.

You can e.g. define a class with a __del__ method and make some
circular references. That should give you a nice memory leak.

sturlamolden