]> granicus.if.org Git - python/commit
[3.5] bpo-34623: Use XML_SetHashSalt in _elementtree (#9933)
authorstratakis <cstratak@redhat.com>
Mon, 25 Feb 2019 21:04:09 +0000 (22:04 +0100)
committerlarryhastings <larry@hastings.org>
Mon, 25 Feb 2019 21:04:09 +0000 (13:04 -0800)
commit41b48e71ac8a71f56694b548f118bd20ce203410
treeee0a51c3ec598d7becda5d73c7bb068d9fec2dfa
parent1a2b52bbd2c6513aaf5bb915890ea7647713d5df
[3.5] bpo-34623: Use XML_SetHashSalt in _elementtree (#9933)

* bpo-34623: Use XML_SetHashSalt in _elementtree (GH-9146)

The C accelerated _elementtree module now initializes hash randomization
salt from _Py_HashSecret instead of libexpat's default CPRNG.

Signed-off-by: Christian Heimes <christian@python.org>
https://bugs.python.org/issue34623
(cherry picked from commit cb5778f00ce48631c7140f33ba242496aaf7102b)

Co-authored-by: Christian Heimes <christian@python.org>
Include/pyexpat.h
Misc/NEWS.d/next/Security/2018-09-10-16-05-39.bpo-34623.Ua9jMv.rst [new file with mode: 0644]
Modules/_elementtree.c
Modules/pyexpat.c