mirror of
https://github.com/python/cpython.git
synced 2025-11-24 12:20:42 +00:00
Fix a double free when positioning a database cursor to a non-existant
string key (and probably a few other situations with string keys). This was reported with a patch as pybsddb sourceforge bug 1708868 by jjjhhhlll at gmail.
This commit is contained in:
parent
392505391e
commit
10bed54ae2
2 changed files with 33 additions and 1 deletions
|
|
@ -328,7 +328,19 @@ make_key_dbt(DBObject* self, PyObject* keyobj, DBT* key, int* pflags)
|
|||
return 0;
|
||||
}
|
||||
|
||||
key->data = PyString_AS_STRING(keyobj);
|
||||
/*
|
||||
* NOTE(gps): I don't like doing a data copy here, it seems
|
||||
* wasteful. But without a clean way to tell FREE_DBT if it
|
||||
* should free key->data or not we have to. Other places in
|
||||
* the code check for DB_THREAD and forceably set DBT_MALLOC
|
||||
* when we otherwise would leave flags 0 to indicate that.
|
||||
*/
|
||||
key->data = strdup(PyString_AS_STRING(keyobj));
|
||||
if (key->data == NULL) {
|
||||
PyErr_SetString(PyExc_MemoryError, "Key memory allocation failed");
|
||||
return 0;
|
||||
}
|
||||
key->flags = DB_DBT_REALLOC;
|
||||
key->size = PyString_GET_SIZE(keyobj);
|
||||
}
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue