Message232362
| Author |
rhettinger |
| Recipients |
hakril, mark.dickinson, r.david.murray, rhettinger, serhiy.storchaka, vstinner |
| Date |
2014年12月09日.10:32:32 |
| SpamBayes Score |
-1.0 |
| Marked as misclassified |
Yes |
| Message-id |
<1418121152.68.0.614991496608.issue22939@psf.upfronthosting.co.za> |
| In-reply-to |
| Content |
I would think that the PY_SSIZE_T_MAX check belongs inside the:
if (result != NULL) {
it->it_index++;
return result;
}
just before the increment which could cause the overflow. Also, PY_SSIZE_T_MAX is a valid value to pass to PySequence_GetItem(), so it shouldn't be blocked unless necessary. |
|