[issue27056] pickle: constant propagation in _Unpickler_Read()

Serhiy Storchaka report at bugs.python.org
Fri May 20 10:07:49 EDT 2016


Serhiy Storchaka added the comment:

I think that integer overflow in _Unpickler_Read() is possible. n is read from file and can be arbitrary (up to PY_SSIZE_T_MAX). This likely cause raising an exception later, but integer overflow itself causes undefined behavior, and we should avoid it.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue27056>
_______________________________________


More information about the Python-bugs-list mailing list