mirror of
https://github.com/python/cpython.git
synced 2025-10-17 12:18:23 +00:00
Added checks for integer overflows, contributed by Google. Some are
only available if asserts are left in the code, in cases where they can't be triggered from Python code.
This commit is contained in:
parent
abcb59a1d8
commit
73c01d4101
25 changed files with 464 additions and 59 deletions
|
@ -5,8 +5,22 @@ asdl_seq *
|
|||
asdl_seq_new(int size, PyArena *arena)
|
||||
{
|
||||
asdl_seq *seq = NULL;
|
||||
size_t n = sizeof(asdl_seq) +
|
||||
(size ? (sizeof(void *) * (size - 1)) : 0);
|
||||
size_t n = (size ? (sizeof(void *) * (size - 1)) : 0);
|
||||
|
||||
/* check size is sane */
|
||||
if (size < 0 || size == INT_MIN ||
|
||||
(size && ((size - 1) > (PY_SIZE_MAX / sizeof(void *))))) {
|
||||
PyErr_NoMemory();
|
||||
return NULL;
|
||||
}
|
||||
|
||||
/* check if size can be added safely */
|
||||
if (n > PY_SIZE_MAX - sizeof(asdl_seq)) {
|
||||
PyErr_NoMemory();
|
||||
return NULL;
|
||||
}
|
||||
|
||||
n += sizeof(asdl_seq);
|
||||
|
||||
seq = (asdl_seq *)PyArena_Malloc(arena, n);
|
||||
if (!seq) {
|
||||
|
@ -22,8 +36,22 @@ asdl_int_seq *
|
|||
asdl_int_seq_new(int size, PyArena *arena)
|
||||
{
|
||||
asdl_int_seq *seq = NULL;
|
||||
size_t n = sizeof(asdl_seq) +
|
||||
(size ? (sizeof(int) * (size - 1)) : 0);
|
||||
size_t n = (size ? (sizeof(void *) * (size - 1)) : 0);
|
||||
|
||||
/* check size is sane */
|
||||
if (size < 0 || size == INT_MIN ||
|
||||
(size && ((size - 1) > (PY_SIZE_MAX / sizeof(void *))))) {
|
||||
PyErr_NoMemory();
|
||||
return NULL;
|
||||
}
|
||||
|
||||
/* check if size can be added safely */
|
||||
if (n > PY_SIZE_MAX - sizeof(asdl_seq)) {
|
||||
PyErr_NoMemory();
|
||||
return NULL;
|
||||
}
|
||||
|
||||
n += sizeof(asdl_seq);
|
||||
|
||||
seq = (asdl_int_seq *)PyArena_Malloc(arena, n);
|
||||
if (!seq) {
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue