new file mode 100644

@@ -0,0 +1,41 @@

+From c3c9db89273fabc62ea1b48389d9a3000c1c03ae Mon Sep 17 00:00:00 2001

+From: Jay Bosamiya <jaybosamiya@gmail.com>

+Date: Sun, 18 Jun 2017 22:11:03 +0530

+Subject: [PATCH] [2.7] bpo-30657: Check & prevent integer overflow in

+ PyString_DecodeEscape (#2174)

+

+---

+ Misc/ACKS              | 1 +

+ Misc/NEWS              | 3 +++

+ Objects/stringobject.c | 8 +++++++-

+ 3 files changed, 11 insertions(+), 1 deletion(-)

+

+diff --git a/Misc/ACKS b/Misc/ACKS

+index 95be42717a0..a411bc5ffc8 100644

+--- a/Misc/ACKS

+@@ -152,6 +152,7 @@ Gregory Bond

+ Matias Bordese

+ Jonas Borgström

+ Jurjen Bos

++Jay Bosamiya

+ Peter Bosch

+ Dan Boswell

+ Eric Bouck

+--- a/Objects/stringobject.c

+@@ -612,7 +612,13 @@ PyObject *PyString_DecodeEscape(const char *s,

+     char *p, *buf;

+     const char *end;

+     PyObject *v;

+-    Py_ssize_t newlen = recode_encoding ? 4*len:len;

++    Py_ssize_t newlen;

++    /* Check for integer overflow */

++    if (recode_encoding && (len > PY_SSIZE_T_MAX / 4)) {

++        PyErr_SetString(PyExc_OverflowError, "string is too large");

++        return NULL;

++    }

++    newlen = recode_encoding ? 4*len:len;

+     v = PyString_FromStringAndSize((char *)NULL, newlen);

+     if (v == NULL)

+         return NULL;

@@ -1,7 +1,7 @@

 Summary:        A high-level scripting language

 Name:           python2

 Version:        2.7.13

-Release:        10%{?dist}

+Release:        11%{?dist}

 License:        PSF

 URL:            http://www.python.org/

 Group:          System Environment/Programming

@@ -14,6 +14,7 @@ Patch1:         added-compiler-flags-for-curses-module.patch

 Patch2:         added-pyopenssl-ipaddress-certificate-validation.patch

 Patch3:         python2-support-photon-platform.patch

 Patch4:         back-port-random-dot-c.patch

+Patch5:         python2-CVE-2017-1000158.patch

 BuildRequires:  pkg-config >= 0.28

 BuildRequires:  bzip2-devel

 BuildRequires:  openssl-devel

@@ -115,6 +116,7 @@ The test package contains all regression tests for Python as well as the modules

 %patch2 -p1

 %patch3 -p1

 %patch4 -p1

+%patch5 -p1

 %build

 export OPT="${CFLAGS}"

@@ -236,6 +238,8 @@ make test

 %{_libdir}/python2.7/test/*

 %changelog

+*   Mon Dec 04 2017 Xiaolin Li <xiaolinl@vmware.com> 2.7.13-11

+-   Fix CVE-2017-1000158

 *   Mon Sep 18 2017 Alexey Makhalov <amakhalov@vmware.com> 2.7.13-10

 -   Requires coreutils or toybox

 -   Requires bzip2-libs