4 ms·
If the float is part of an error message or logging message, the attacker may control portions of the string that appear after the float. This would let them i
by mleonhard 6y ago
If the float is part of an error message or logging message, the attacker may control portions of the string that appear after the float. This would let them inject a much larger range of bytes, perhaps even UTF-8.
- duckerude 6y agoIt's not that powerful, if I'm reading it correctly: https://github.com/python/cpython/commit/34df10a9a16b38d54421eeeaf73ec89828563be7 https://github.com/python/cpython/commit/34df10a9a16b38d5442... The sprintf is to a temporary buffer that's converted to a PyUnicode object before returning, so subsequent portions of the string are written elsewhere.