diff options
| author | Victor Stinner <victor.stinner@gmail.com> | 2013-06-23 12:56:57 (GMT) |
|---|---|---|
| committer | Victor Stinner <victor.stinner@gmail.com> | 2013-06-23 12:56:57 (GMT) |
| commit | 760388100e2cc21c5d58a9014db5426e6107b5e4 (patch) | |
| tree | f09fb0201f06797ddeda2ba73d44bcb8b3cb1af9 /Objects | |
| parent | 223a22b6ababadefa831c634f3094e24d0e36cbe (diff) | |
| download | cpython-760388100e2cc21c5d58a9014db5426e6107b5e4.zip cpython-760388100e2cc21c5d58a9014db5426e6107b5e4.tar.gz cpython-760388100e2cc21c5d58a9014db5426e6107b5e4.tar.bz2 | |
Issue #18137: Detect integer overflow on precision in float.__format__()
and complex.__format__().
Diffstat (limited to 'Objects')
| -rw-r--r-- | Objects/stringlib/formatter.h | 16 |
1 files changed, 14 insertions, 2 deletions
diff --git a/Objects/stringlib/formatter.h b/Objects/stringlib/formatter.h index 6b28224..fd22751 100644 --- a/Objects/stringlib/formatter.h +++ b/Objects/stringlib/formatter.h @@ -928,7 +928,7 @@ format_float_internal(PyObject *value, Py_ssize_t n_total; int has_decimal; double val; - Py_ssize_t precision = format->precision; + Py_ssize_t precision; Py_ssize_t default_precision = 6; STRINGLIB_CHAR type = format->type; int add_pct = 0; @@ -947,6 +947,12 @@ format_float_internal(PyObject *value, from a hard-code pseudo-locale */ LocaleInfo locale; + if (format->precision > INT_MAX) { + PyErr_SetString(PyExc_ValueError, "precision too big"); + goto done; + } + precision = (int)format->precision; + /* Alternate is not allowed on floats. */ if (format->alternate) { PyErr_SetString(PyExc_ValueError, @@ -1078,7 +1084,7 @@ format_complex_internal(PyObject *value, Py_ssize_t n_im_total; int re_has_decimal; int im_has_decimal; - Py_ssize_t precision = format->precision; + Py_ssize_t precision; Py_ssize_t default_precision = 6; STRINGLIB_CHAR type = format->type; STRINGLIB_CHAR *p_re; @@ -1107,6 +1113,12 @@ format_complex_internal(PyObject *value, from a hard-code pseudo-locale */ LocaleInfo locale; + if (format->precision > INT_MAX) { + PyErr_SetString(PyExc_ValueError, "precision too big"); + goto done; + } + precision = (int)format->precision; + /* Alternate is not allowed on complex. */ if (format->alternate) { PyErr_SetString(PyExc_ValueError, |