check for overflow in combinations_with_replacement (closes #23365)

This commit is contained in:
Benjamin Peterson 2015-02-01 21:10:47 -05:00
parent 4b40eeb339
commit 6f082297b2
3 changed files with 12 additions and 1 deletions

View file

@ -2659,6 +2659,10 @@ cwr_new(PyTypeObject *type, PyObject *args, PyObject *kwds)
goto error;
}
if (r > PY_SSIZE_T_MAX/sizeof(Py_ssize_t)) {
PyErr_SetString(PyExc_OverflowError, "r is too big");
goto error;
}
indices = PyMem_Malloc(r * sizeof(Py_ssize_t));
if (indices == NULL) {
PyErr_NoMemory();