Boya Sun <[email protected]> added the comment:
In Python/pyarena.c:
block_new(size_t size)
{
/* Allocate header and block as one unit.
ab_mem points just past header. */
block *b = (block *)malloc(sizeof(block) + size);
...
}
Should a check for overflow of "size" also be performed before calling
"malloc"?
----------
nosy: +boya
_______________________________________
Python tracker <[email protected]>
<http://bugs.python.org/issue2620>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe:
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
