Message265946
I think that integer overflow in _Unpickler_Read() is possible. n is read from file and can be arbitrary (up to PY_SSIZE_T_MAX). This likely cause raising an exception later, but integer overflow itself causes undefined behavior, and we should avoid it. |
|
Date |
User |
Action |
Args |
2016-05-20 14:07:49 | serhiy.storchaka | set | recipients:
+ serhiy.storchaka, vstinner, python-dev |
2016-05-20 14:07:49 | serhiy.storchaka | set | messageid: <1463753269.69.0.834606005526.issue27056@psf.upfronthosting.co.za> |
2016-05-20 14:07:49 | serhiy.storchaka | link | issue27056 messages |
2016-05-20 14:07:49 | serhiy.storchaka | create | |
|