[New-bugs-announce] [issue3306] audioop.findmax() crashs with negative length

[STINNER Victor]

New submission from STINNER Victor <haypo at users.sourceforge.net>:

Example:
>>> import audioop
>>> audioop.findmax(''.join( chr(x) for x in xrange(256)), -2392392)
Erreur de segmentation (core dumped)

The problem is that audioop_findmax() doesn't check len2 for negative 
value. Here is a patch ;-)

----------
components: Library (Lib)
files: audioop_findmax.patch
keywords: patch
messages: 69356
nosy: haypo
severity: normal
status: open
title: audioop.findmax() crashs with negative length
versions: Python 2.6
Added file: http://bugs.python.org/file10835/audioop_findmax.patch

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue3306>
_______________________________________