[CVE-2017-18207]Improve exceptions in aifc, wave and sunau. 41/256741/1 submit/tizen_6.0_base/20210412.113806
authorJinWang An <jinwang.an@samsung.com>
Mon, 12 Apr 2021 07:10:22 +0000 (16:10 +0900)
committerJinWang An <jinwang.an@samsung.com>
Mon, 12 Apr 2021 07:10:22 +0000 (16:10 +0900)
commitc506df4b10da984ee2f5c0bf9745cb7314c65c79
tree37726322fb0c12e1213d8bbe016e6f56c703b8a6
parent71a3e5821d23fba27b38508d395329663ef7f1bf
[CVE-2017-18207]Improve exceptions in aifc, wave and sunau.

** DISPUTED ** The Wave_read._read_fmt_chunk function
in Lib/wave.py in Python through 3.6.4 does not ensure
a nonzero channel value, which allows attackers to cause
a denial of service (divide-by-zero and exception) via
a crafted wav format audio file. NOTE: the vendor disputes
this issue because Python applications "need
to be prepared to handle a wide variety of exceptions."

Change-Id: Ia7b958c4d95596552802eda52f257fcc3fcc7469
Signed-off-by: JinWang An <jinwang.an@samsung.com>
Lib/aifc.py
Lib/sunau.py
Lib/test/test_aifc.py
Lib/test/test_sunau.py
Lib/wave.py