gh-136912: fix handling of OverflowError in hmac.digest
#136917
Conversation
picnixz
force-pushed
the
fix/hmac/catch-overflow-error-136912
branch
5 times, most recently
from
99d62fe to
d0079c6
Compare
|
!buildbot bigmem |
|
🤖 New build scheduled with the buildbot fleet by @picnixz for commit d0079c6 🤖 Results will be shown at: https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F136917%2Fmerge The command will test the builders whose names match following regular expression: The builders matched are:
|
|
!buildbot bigmem |
|
🤖 New build scheduled with the buildbot fleet by @picnixz for commit f93e1ba 🤖 Results will be shown at: https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F136917%2Fmerge The command will test the builders whose names match following regular expression: The builders matched are:
|
|
!buildbot bigmem |
|
🤖 New build scheduled with the buildbot fleet by @picnixz for commit df36d7d 🤖 Results will be shown at: https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F136917%2Fmerge The command will test the builders whose names match following regular expression: The builders matched are:
|
|
!buildbot bigmem |
|
🤖 New build scheduled with the buildbot fleet by @picnixz for commit 74239be 🤖 Results will be shown at: https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F136917%2Fmerge The command will test the builders whose names match following regular expression: The builders matched are:
|
|
I'll rewrite this PR tomorrow to use suggestion 4. |
| @@ -241,13 +241,23 @@ def digest(key, msg, digest): | |||
| if _hashopenssl and isinstance(digest, (str, _functype)): | |||
| try: | |||
| return _hashopenssl.hmac_digest(key, msg, digest) | |||
| except OverflowError: | |||
| try: | |||
| return _hashopenssl.hmac_new(key, msg, digest).digest() | |||
There was a problem hiding this comment.
@gpshead This will create a real HMAC object using OpenSSL and handles chunks in C. Alternatively, I can just catch the OverflowError directly and ignore it. The pure Python implementation already handles chunks as we just call .update() which is implemented in C as well.
picnixz
force-pushed
the
fix/hmac/catch-overflow-error-136912
branch
4 times, most recently
from
1188f4a to
84ea348
Compare
picnixz
force-pushed
the
fix/hmac/catch-overflow-error-136912
branch
from
84ea348 to
7e01d44
Compare
picnixz
force-pushed
the
fix/hmac/catch-overflow-error-136912
branch
from
7e01d44 to
1082bd5
Compare
picnixz
added
needs backport to 3.14
|
!buildbot bigmem |
|
🤖 New build scheduled with the buildbot fleet by @picnixz for commit 1082bd5 🤖 Results will be shown at: https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F136917%2Fmerge The command will test the builders whose names match following regular expression: The builders matched are:
|
Uh oh!
There was an error while loading. Please reload this page.