Bug 3191

Summary:	Update candidate for python-simplejson 2.1.3-1
Product:	Mageia	Reporter:	Philippe Makowski <makowski.mageia>
Component:	RPM Packages	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Normal	CC:	davidwhodgins, sysadmin-bugs, tmb
Version:	1	Keywords:	validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:	python-simplejson-2.1.3-1.mga1	CVE:
Status comment:

Description Philippe Makowski 2011-10-26 12:36:10 CEST

This update provides python-simplejson-2.1.6-1.mga1

it fix a segfault

before :
$ python -c "import simplejson; simplejson.loads('[' * 100000 + '1' + ']' * 100000)"
Erreur de segmentation

after :
RuntimeError: maximum recursion depth exceeded while decoding a JSON document

Comment 1 Dave Hodgins 2011-10-26 23:03:08 CEST

In addition to the RuntimeError, it generates a traceback, which I gather
is appropriate.

Testing complete on i586 for the srpm
python-simplejson-2.1.6-1.mga1.src.rpm

Advisory:  This bugfix update for python-simplejson corrects a
segfault when the maximum recursion depth has been exceeded
in a javascript object notation.

https://bugs.mageia.org/show_bug.cgi?id=3191

CC: (none) => davidwhodgins

Comment 2 claire robinson 2011-10-27 10:33:38 CEST

x86_64

Before
------

# python -c "import simplejson; simplejson.loads('[' * 100000 + '1' + ']' * 100000)"
Segmentation fault

After
-----

# python -c "import simplejson; simplejson.loads('[' * 100000 + '1' + ']' * 100000)"
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/lib64/python2.7/site-packages/simplejson/__init__.py", line 385, in loads
    return _default_decoder.decode(s)
  File "/usr/lib64/python2.7/site-packages/simplejson/decoder.py", line 402, in decode
    obj, end = self.raw_decode(s, idx=_w(s, 0).end())
  File "/usr/lib64/python2.7/site-packages/simplejson/decoder.py", line 418, in raw_decode
    obj, end = self.scan_once(s, idx)
RuntimeError: maximum recursion depth exceeded while decoding a JSON document


Update validated

Advisory
------------------
This bugfix update for python-simplejson corrects a
segfault when the maximum recursion depth has been exceeded
in a javascript object notation.

https://bugs.mageia.org/show_bug.cgi?id=3191
------------------

SRPM: python-simplejson-2.1.6-1.mga1.src.rpm

Could sysadmin please push from core/updates_testing to core/updates

Thankyou!

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Comment 3 Thomas Backlund 2011-10-27 11:10:34 CEST

Update pushed.

Status: NEW => RESOLVED
CC: (none) => tmb
Resolution: (none) => FIXED