➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author marcin.bachry
Recipients ezio.melotti, flox, marcin.bachry, mark.dickinson, vstinner, zuo
Date 2010-01-26.19:55:25
SpamBayes Score 3.82356e-05
Marked as misclassified No
Message-id <1264535729.62.0.140493535448.issue7788@psf.upfronthosting.co.za>
In-reply-to
Content 
I think the expression "cur + step" in line 2660 of listobject.c (py2.7 trunk) overflows to negative value and the "if" branch isn't entered.

  if (cur + step >= Py_SIZE(self)) {
    lim = Py_SIZE(self) - cur - 1;
   }

If I change the type of "cur" variable to unsigned int, the bug disappears. I don't know if it's ok to have unsigned "cur" here though - but I feel it is.
History
Date User Action Args
2010-01-26 19:55:29marcin.bachrysetrecipients: + marcin.bachry, mark.dickinson, vstinner, ezio.melotti, zuo, flox
2010-01-26 19:55:29marcin.bachrysetmessageid: <1264535729.62.0.140493535448.issue7788@psf.upfronthosting.co.za>
2010-01-26 19:55:26marcin.bachrylinkissue7788 messages
2010-01-26 19:55:26marcin.bachrycreate