Re: Python 2.4 & 2.5 vulnerable, Patches inside

[Jonathan Schleifer <js-pkgsrc-users%webkeks.org@localhost>]

Christian Biere <christianbiere%gmx.de@localhost> wrote:

> I'm talking about nonsense such as this:
> 
>  + int bytesize, nsize
> [...]
>  +    bytesize = nsize * 2;
>  +    if (bytesize / 2 != nsize)
>  +    return PyErr_NoMemory();

Ok, that indeed is a bad check for an integer overflow… I should have
looked more deeply at the patches before sending them in.

-- 
Jonathan

Attachment: signature.asc
Description: PGP signature