Issue #16335: Fix integer overflow in unicode-escape decoder.

This commit is contained in:
Serhiy Storchaka 2013-01-21 11:38:00 +02:00
parent 410eee566f
commit 4f5f0e54e0
2 changed files with 18 additions and 1 deletions

View file

@ -3923,7 +3923,8 @@ PyObject *PyUnicode_DecodeUnicodeEscape(const char *s,
/* found a name. look it up in the unicode database */
message = "unknown Unicode character name";
s++;
if (ucnhash_CAPI->getcode(NULL, start, (int)(s-start-1), &chr))
if (s - start - 1 <= INT_MAX &&
ucnhash_CAPI->getcode(NULL, start, (int)(s-start-1), &chr))
goto store;
}
}