5d6556dc39
memory allocation (CVE-2008-2315 and CVE-2008-2316) - also apply upstream svn rev.65262, fixes overflow checks in memory allocation (CVE-2008-3142 and CVE-2008-3144) Approved by: portmgr (pav) Security: http://www.vuxml.org/freebsd/0dccaa28-7f3c-11dd-8de5-0030843d3802.html
12 lines
425 B
C
12 lines
425 B
C
--- Modules/mmapmodule.c.orig 2008-08-05 12:00:52.000000000 +0200
|
|
+++ Modules/mmapmodule.c
|
|
@@ -223,7 +223,7 @@ mmap_read_method(mmap_object *self,
|
|
return(NULL);
|
|
|
|
/* silently 'adjust' out-of-range requests */
|
|
- if ((self->pos + num_bytes) > self->size) {
|
|
+ if (num_bytes > self->size - self->pos) {
|
|
num_bytes -= (self->pos+num_bytes) - self->size;
|
|
}
|
|
result = Py_BuildValue("s#", self->data+self->pos, num_bytes);
|