[issue24521] Integer overflow in _pickle.c

2015-06-28 Thread Arfrever Frehtes Taifersar Arahesis
Changes by Arfrever Frehtes Taifersar Arahesis arfrever@gmail.com: -- nosy: +Arfrever ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue24521 ___

[issue24521] Integer overflow in _pickle.c

2015-06-27 Thread Benjamin Peterson
New submission from Benjamin Peterson: Reported by Kurucsai Istvan on the security list: I. Summary There is an integer overflow in the _Unpickler_ResizeMemoList function in _pickle.c. It is reachable e.g. via the LONG_BINPUT opcode. II. Source code The functions in question: static int

[issue24521] Integer overflow in _pickle.c

2015-06-27 Thread Benjamin Peterson
Benjamin Peterson added the comment: https://hg.python.org/cpython/rev/acd5c9118931 -- resolution: - fixed status: open - closed ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue24521 ___