+8
-0
lines changedFilter options
+8
-0
lines changed Original file line number Diff line number Diff line change
@@ -10,6 +10,9 @@ Release date: tba
10
10
Core and Builtins
11
11
-----------------
12
12
13
+
- Issue #26171: Fix possible integer overflow and heap corruption in
14
+
zipimporter.get_data().
15
+
13
16
Library
14
17
-------
15
18
Original file line number Diff line number Diff line change
@@ -1111,6 +1111,11 @@ get_data(PyObject *archive, PyObject *toc_entry)
1111
1111
}
1112
1112
file_offset += l; /* Start of file data */
1113
1113
1114
+
if (data_size > LONG_MAX - 1) {
1115
+
fclose(fp);
1116
+
PyErr_NoMemory();
1117
+
return NULL;
1118
+
}
1114
1119
bytes_size = compress == 0 ? data_size : data_size + 1;
1115
1120
if (bytes_size == 0)
1116
1121
bytes_size++;
You can’t perform that action at this time.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4