summaryrefslogtreecommitdiff
path: root/Python/dynload_win.c
diff options
context:
space:
mode:
authorSerhiy Storchaka <storchaka@gmail.com>2017-06-28 08:30:06 +0300
committerGitHub <noreply@github.com>2017-06-28 08:30:06 +0300
commitf7eae0adfcd4c50034281b2c69f461b43b68db84 (patch)
tree02d6a582fd81f615e71c55365f1b37a774fc0a4e /Python/dynload_win.c
parent592eda123329bb5ce2bffcbe3701be6b909f1b2a (diff)
downloadcpython-git-f7eae0adfcd4c50034281b2c69f461b43b68db84.tar.gz
[security] bpo-13617: Reject embedded null characters in wchar* strings. (#2302)
Based on patch by Victor Stinner. Add private C API function _PyUnicode_AsUnicode() which is similar to PyUnicode_AsUnicode(), but checks for null characters.
Diffstat (limited to 'Python/dynload_win.c')
-rw-r--r--Python/dynload_win.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/Python/dynload_win.c b/Python/dynload_win.c
index 05050cf41d..0fdf77f552 100644
--- a/Python/dynload_win.c
+++ b/Python/dynload_win.c
@@ -190,13 +190,13 @@ dl_funcptr _PyImport_FindSharedFuncptrWindows(const char *prefix,
{
dl_funcptr p;
char funcname[258], *import_python;
- wchar_t *wpathname;
+ const wchar_t *wpathname;
#ifndef _DEBUG
_Py_CheckPython3();
#endif
- wpathname = PyUnicode_AsUnicode(pathname);
+ wpathname = _PyUnicode_AsUnicode(pathname);
if (wpathname == NULL)
return NULL;