117de2b181
In `_tkinit`, `PyLong_AsVoidPtr(arg)` converts an arbitrary Python object to a `void*` pointer which is then cast to `Tcl_Interp*` and passed to `TkImaging_Init`. If `PyLong_AsVoidPtr` fails (returns NULL and sets an error), or if the caller passes an arbitrary integer value, the code proceeds to dereference it without any validation, potentially leading to a crash or arbitrary memory access. Affected files: _imagingtk.c Signed-off-by: Trần Bách <45133811+barttran2k@users.noreply.github.com> |
||
|---|---|---|
| _custom_build | ||
| .ci | ||
| .github | ||
| checks | ||
| depends | ||
| docs | ||
| src | ||
| Tests | ||
| wheels | ||
| winbuild | ||
| .clang-format | ||
| .coveragerc | ||
| .editorconfig | ||
| .git-blame-ignore-revs | ||
| .gitattributes | ||
| .gitignore | ||
| .gitmodules | ||
| .pre-commit-config.yaml | ||
| .readthedocs.yml | ||
| CHANGES.rst | ||
| codecov.yml | ||
| conftest.py | ||
| LICENSE | ||
| Makefile | ||
| MANIFEST.in | ||
| pyproject.toml | ||
| README.md | ||
| RELEASING.md | ||
| selftest.py | ||
| setup.py | ||
| tox.ini | ||
Pillow
Python Imaging Library (Fork)
Pillow is the friendly PIL fork by Jeffrey 'Alex' Clark and contributors. PIL is the Python Imaging Library by Fredrik Lundh and contributors. As of 2019, Pillow development is supported by Tidelift.
| docs |
|
|---|---|
| tests |
|
| package |
|
| social |
|
Overview
The Python Imaging Library adds image processing capabilities to your Python interpreter.
This library provides extensive file format support, an efficient internal representation, and fairly powerful image processing capabilities.
The core image library is designed for fast access to data stored in a few basic pixel formats. It should provide a solid foundation for a general image processing tool.
More information
Report a vulnerability
To report a security vulnerability, please follow the procedure described in the Tidelift security policy.