Add news item for _winreg fix (SF bug 851056).

diff --git a/Misc/NEWS b/Misc/NEWS
index c9053659b6099f95a0781b7f0bbaa22229651d19..ce9d779e2d5cd09bc8dfe22dfa996387fbc7ecac 100644 (file)
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -270,6 +270,11 @@ Tests
 Windows
 -------
 
+- The _winreg module could segfault when reading very large registry
+  values, due to unchecked alloca() calls (SF bug 851056).  The fix is
+  uses either PyMem_Malloc(n) or PyString_FromStringAndSize(NULL, n),
+  as appropriate, followed by a size check.
+
 - file.truncate() could misbehave if the file was open for update
   (modes r+, rb+, w+, wb+), and the most recent file operation before
   the truncate() call was an input operation.  SF bug 801631.