New submission from Raymond Hettinger:
The Py_ssizet indexes can overflow the "childpos" variable:
childpos = 2*pos + 1; /* leftmost child position */
while (childpos < endpos) ...
http://googleresearch.blogspot.com/2006/06/extra-extra-read-all-about-it-nearly.html
----------
assignee: rhettinger
components: Extension Modules
messages: 217389
nosy: rhettinger
priority: normal
severity: normal
stage: needs patch
status: open
title: Fix and test overflow behavior in the C version of heapq
type: behavior
versions: Python 2.7, Python 3.4, Python 3.5
_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue21375>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe:
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
