Author sbt
Recipients brian.curtin, pitrou, sbt, schlamar, serhiy.storchaka, terry.reedy, tim.golden
Date 2012-12-25.00:15:16
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1356394516.75.0.499972679253.issue16743@psf.upfronthosting.co.za>
In-reply-to
Content
This bit looks wrong to me:

            if (offset - size > PY_SSIZE_T_MAX)
                /* Map area too large to fit in memory */
                m_obj->size = (Py_ssize_t) -1;

Should it not be "size - offset" instead of "offset - size"?  (offset and size are Py_LONG_LONG.)  And there is no check that offset is non-negative.
History
Date User Action Args
2012-12-25 00:15:16sbtsetrecipients: + sbt, terry.reedy, pitrou, tim.golden, brian.curtin, schlamar, serhiy.storchaka
2012-12-25 00:15:16sbtsetmessageid: <1356394516.75.0.499972679253.issue16743@psf.upfronthosting.co.za>
2012-12-25 00:15:16sbtlinkissue16743 messages
2012-12-25 00:15:16sbtcreate