Stowage/cpython
2
0
Fork 0
mirror of https://github.com/python/cpython.git synced 2026-01-06 23:42:34 +00:00
Code Issues Projects Releases Packages Wiki Activity

Issue #12847: Fix a crash with negative PUT and LONG_BINPUT arguments in

Browse source 
the C pickle implementation.
This commit is contained in:
Antoine Pitrou 2011-08-30 00:27:10 +02:00
parent 82be19f889
commit 55549ec476
4 changed files with 31 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

11
Modules/_pickle.c
View file

@ -4853,8 +4853,12 @@ load_put(UnpicklerObject *self)
return -1;
idx = PyLong_AsSsize_t(key);
Py_DECREF(key);
if (idx == -1 && PyErr_Occurred())
if (idx < 0) {
if (!PyErr_Occurred())
PyErr_SetString(PyExc_ValueError,
"negative PUT argument");
return -1;
}
return _Unpickler_MemoPut(self, idx, value);
}
@ -4893,6 +4897,11 @@ load_long_binput(UnpicklerObject *self)
value = self->stack->data[Py_SIZE(self->stack) - 1];
idx = calc_binsize(s, 4);
if (idx < 0) {
PyErr_SetString(PyExc_ValueError,
"negative LONG_BINPUT argument");
return -1;
}
return _Unpickler_MemoPut(self, idx, value);
}