diff options
| author | Mark Dickinson <dickinsm@gmail.com> | 2010-06-11 16:56:34 (GMT) |
|---|---|---|
| committer | Mark Dickinson <dickinsm@gmail.com> | 2010-06-11 16:56:34 (GMT) |
| commit | ab4096f2f9cc3f2a06e24d8dbe9c3e8e0ba155f0 (patch) | |
| tree | 535bc73bf3c05c67c928e1d13cd6c519c1e9e832 /Modules/_struct.c | |
| parent | 1c164a6f85865ab6c84d4bfb6bfbf1dde6169603 (diff) | |
| download | cpython-ab4096f2f9cc3f2a06e24d8dbe9c3e8e0ba155f0.zip cpython-ab4096f2f9cc3f2a06e24d8dbe9c3e8e0ba155f0.tar.gz cpython-ab4096f2f9cc3f2a06e24d8dbe9c3e8e0ba155f0.tar.bz2 | |
Avoid possible undefined behaviour from signed overflow.
Diffstat (limited to 'Modules/_struct.c')
| -rw-r--r-- | Modules/_struct.c | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/Modules/_struct.c b/Modules/_struct.c index 2e594e8..e05fb73 100644 --- a/Modules/_struct.c +++ b/Modules/_struct.c @@ -1186,14 +1186,17 @@ prepare_s(PyStructObject *self) if ('0' <= c && c <= '9') { num = c - '0'; while ('0' <= (c = *s++) && c <= '9') { - x = num*10 + (c - '0'); - if (x/10 != num) { + /* overflow-safe version of + if (num*10 + (c - '0') > PY_SSIZE_T_MAX) { ... } */ + if (num >= PY_SSIZE_T_MAX / 10 && ( + num > PY_SSIZE_T_MAX / 10 || + (c - '0') > PY_SSIZE_T_MAX % 10)) { PyErr_SetString( StructError, "overflow in item count"); return -1; } - num = x; + num = num*10 + (c - '0'); } if (c == '\0') { PyErr_SetString(StructError, |