Message178111
This bit looks wrong to me:
if (offset - size > PY_SSIZE_T_MAX)
/* Map area too large to fit in memory */
m_obj->size = (Py_ssize_t) -1;
Should it not be "size - offset" instead of "offset - size"? (offset and size are Py_LONG_LONG.) And there is no check that offset is non-negative. |
|
Date |
User |
Action |
Args |
2012-12-25 00:15:16 | sbt | set | recipients:
+ sbt, terry.reedy, pitrou, tim.golden, brian.curtin, schlamar, serhiy.storchaka |
2012-12-25 00:15:16 | sbt | set | messageid: <1356394516.75.0.499972679253.issue16743@psf.upfronthosting.co.za> |
2012-12-25 00:15:16 | sbt | link | issue16743 messages |
2012-12-25 00:15:16 | sbt | create | |
|