blob: 07dea4301b97098857a1716823677fd10ba7bed8 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
$NetBSD: patch-bd,v 1.1.2.2 2008/09/02 14:13:33 rtr Exp $
Patch for CVE-2008-2315 taken from Gentoo.
--- Objects/longobject.c.orig 2007-05-07 19:30:48.000000000 +0100
+++ Objects/longobject.c 2008-08-30 10:16:13.000000000 +0100
@@ -70,6 +70,8 @@
PyErr_NoMemory();
return NULL;
}
+ /* XXX(nnorwitz): This can overflow --
+ PyObject_NEW_VAR / _PyObject_VAR_SIZE need to detect overflow */
return PyObject_NEW_VAR(PyLongObject, &PyLong_Type, size);
}
|