Issue #15736: Fix overflow in _PySequence_BytesToCharpArray().

This commit is contained in:
Stefan Krah 2012-08-21 08:16:09 +02:00
parent 514dbb03ba
commit 7cacd2eb92
2 changed files with 15 additions and 0 deletions

View file

@ -2728,6 +2728,13 @@ _PySequence_BytesToCharpArray(PyObject* self)
if (argc == -1)
return NULL;
assert(argc >= 0);
if ((size_t)argc > (PY_SSIZE_T_MAX-sizeof(char *)) / sizeof(char *)) {
PyErr_NoMemory();
return NULL;
}
array = malloc((argc + 1) * sizeof(char *));
if (array == NULL) {
PyErr_NoMemory();