rpm/python
SHA256
1
0
Fork 0
forked from pool/python
Code Pull Requests Activity

There is no InvalidFileException

Browse Source 
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=388
This commit is contained in:
Matej Cepl 2023-09-16 21:37:01 +00:00 committed by Git OBS Bridge
parent e20f9250e8
commit 58f1758208
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
CVE-2022-48565-plistlib-XML-vulns.patch
View File

@ -31,7 +31,7 @@ Co-authored-by: Ned Deily <nad@python.org>
+ # vulnerabilies in expat. Regular plist files don't contain + # vulnerabilies in expat. Regular plist files don't contain
+ # those declerations, and Apple's plutil tool does not accept + # those declerations, and Apple's plutil tool does not accept
+ # them either. + # them either.
+ raise InvalidFileException( + raise ValueError(
+ "XML entity declarations are not supported in plist files") + "XML entity declarations are not supported in plist files")
+ +
def handleBeginElement(self, element, attrs): def handleBeginElement(self, element, attrs):
@ -64,7 +64,7 @@ Co-authored-by: Ned Deily <nad@python.org>
self.assertEqual(test2, result2) self.assertEqual(test2, result2)
+ def test_xml_plist_with_entity_decl(self): + def test_xml_plist_with_entity_decl(self):
+ with self.assertRaisesRegexp(plistlib.InvalidFileException, + with self.assertRaisesRegexp(ValueError,
+ "XML entity declarations are not supported"): + "XML entity declarations are not supported"):
+ plistlib.readPlistFromString(XML_PLIST_WITH_ENTITY) + plistlib.readPlistFromString(XML_PLIST_WITH_ENTITY)
+ +