New submission from Gregory P. Smith <g...@krypto.org>:

An off by one error was introduced to peephole.c by the "off by one error fix" 
in https://bugs.python.org/issue28517.  Clang's memory sanitizer detects it 
(msan).

find_op is ultimately called with h == codelen so it accesses one byte out of 
bounds.

I have a fix, PR coming.

----------
assignee: gregory.p.smith
components: Interpreter Core
messages: 329485
nosy: gregory.p.smith, serhiy.storchaka
priority: normal
severity: normal
status: open
title: Off by one error in peephole call to find_op on case RETURN_VALUE
type: crash
versions: Python 3.6, Python 3.7, Python 3.8

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue35193>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to