Security Concerns in modules and functions - ebranca/owasp-pysec GitHub Wiki

Builtins

• Compare decimal and float

• Compare float with string

• Numeric literal and whitespaces

• Statement 'if 0: yield' not failing with error

• Statement 'if 0: return' not failing with error

• Bytes type in python 2 and python 3

• Python private attributes

• Overflow in len() function

• Buffered and unbuffered stream redirections

• Recursion Memory errors

• Conditional code execution can generate unexpected errors

• Missing checks for invalid write to closed fd

• Unsafe String interpretation if using eval() function

• Unicode string silently truncated

• Unsafe String interpretation if using input() function

• Numeric overflow in builtin function xrange

module: ast

• Infinite recursion with ast module

module: sys

• Overflow on posix file date

module: os

• Python probelms with environment variables

module: ``ctypes```

• String with NULs and ctypes

• Python ctypes not checking for overflow

• Segfault with ctypes deep call stack calls

module: shlex

• Module shlex removing newline after comment

module: locale

• Python locale unhandled conditions

module: time

• Overflow and Value errors in time module

module: readline

• Readline input loss

• Readline string modification

module: subprocess

• Subprocess redirect after object construction

• Subprocess exception on terminate

module: mmap

• Function mmap resizes without checking for valid fd

module: pprint

Parenthesis converted by pprint

module: json

• Unexpected parsing error in json module

module: pickle

• Possible data corruption using pickle

• Unrestricted code execution using pickle

module: cPickle

• Possible data corruption using cPickle