Matt Bandy <[email protected]> added the comment:
That should probably be:
#define Py_ADDRESS_IN_RANGE(P, POOL) \
((x = (POOL)->arenaindex) < maxarenas && \
(uptr)(P) - arenas[x].address < (uptr)ARENA_SIZE && \
arenas[x].address != 0)
The address in the arena shouldn't change since it does belong to Python, so no
one should be monkeying with it without the GIL. The arenaindex is vulnerable
since POOL can point to something not owned by Python.
----------
_______________________________________
Python tracker <[email protected]>
<http://bugs.python.org/issue8020>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe:
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
