]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.9] gh-97616: list_resize() checks for integer overflow (GH-97617) (GH-97627)
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Tue, 4 Oct 2022 17:01:10 +0000 (10:01 -0700)
committerGitHub <noreply@github.com>
Tue, 4 Oct 2022 17:01:10 +0000 (10:01 -0700)
commitf65f3a9daf8e7d0c6c90a86f0c5bbb10ae9191bc
treedbefb084e19c08a8fe0b2b8fff22f6d88249bbfc
parentd6ef6805b2e60a50a83e73bd2f40fc3a03715b32
[3.9] gh-97616: list_resize() checks for integer overflow (GH-97617) (GH-97627)

gh-97616: list_resize() checks for integer overflow (GH-97617)

Fix multiplying a list by an integer (list *= int): detect the
integer overflow when the new allocated length is close to the
maximum size.  Issue reported by Jordan Limor.

list_resize() now checks for integer overflow before multiplying the
new allocated length by the list item size (sizeof(PyObject*)).
(cherry picked from commit a5f092f3c469b674b8d9ccbd4e4377230c9ac7cf)

Co-authored-by: Victor Stinner <vstinner@python.org>
Lib/test/test_list.py
Misc/NEWS.d/next/Security/2022-09-28-17-09-37.gh-issue-97616.K1e3Xs.rst [new file with mode: 0644]
Objects/listobject.c