[issue27056] pickle: constant propagation in _Unpickler_Read()
Serhiy Storchaka
report at bugs.python.org
Fri May 20 10:07:49 EDT 2016
Serhiy Storchaka added the comment:
I think that integer overflow in _Unpickler_Read() is possible. n is read from file and can be arbitrary (up to PY_SSIZE_T_MAX). This likely cause raising an exception later, but integer overflow itself causes undefined behavior, and we should avoid it.
----------
_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue27056>
_______________________________________
More information about the Python-bugs-list
mailing list