Skip to content

Conversation

miss-islington
Copy link
Contributor

@miss-islington miss-islington commented Jul 29, 2024

  • Authenticate socket connection for socket.socketpair() fallback when the platform does not have a native socketpair C API. We authenticate in-process using getsocketname and getpeername (thanks to Nathaniel J Smith for that suggestion).

(cherry picked from commit 78df104)

Co-authored-by: Seth Michael Larson [email protected]
Co-authored-by: Gregory P. Smith [email protected]

…r()` fallback (pythonGH-122134)

* Authenticate socket connection for `socket.socketpair()` fallback when the platform does not have a native `socketpair` C API.  We authenticate in-process using `getsocketname` and `getpeername` (thanks to Nathaniel J Smith for that suggestion).

(cherry picked from commit 78df104)

Co-authored-by: Seth Michael Larson <[email protected]>
Co-authored-by: Gregory P. Smith <[email protected]>
@gpshead gpshead enabled auto-merge (squash) July 29, 2024 21:46
@gpshead gpshead merged commit b252317 into python:3.13 Jul 30, 2024
39 checks passed
@zware
Copy link
Member

zware commented Jul 30, 2024

Full disclosure: the TSAN job had failed test_importlib spuriously the first try; I triggered a "Re-run failed jobs" which allowed the auto-merge to finally happen.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type-security A security issue
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants