-
-
Notifications
You must be signed in to change notification settings - Fork 32.4k
Open
Labels
extension-modulesC modules in the Modules dirC modules in the Modules dirinterpreter-core(Objects, Python, Grammar, and Parser dirs)(Objects, Python, Grammar, and Parser dirs)staleStale PR or inactive for long period of time.Stale PR or inactive for long period of time.type-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or error
Description
Bug report
Bug description:
From capi-workgroup/decisions#50 (comment) and capi-workgroup/decisions#50 (comment).
Some calls to the PyMem_*
API uses an arithmetic operation on the size, which could make the requested length overflow. The checks in the corresponding functions would not be relevant since the inputs already overflowed.
See #127686 (comment) for the future of this issue.
CPython versions tested on:
CPython main branch
Operating systems tested on:
No response
Linked PRs
Metadata
Metadata
Assignees
Labels
extension-modulesC modules in the Modules dirC modules in the Modules dirinterpreter-core(Objects, Python, Grammar, and Parser dirs)(Objects, Python, Grammar, and Parser dirs)staleStale PR or inactive for long period of time.Stale PR or inactive for long period of time.type-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or error