Skip to content

Decoding bytes/charptr with large bounds can crash #3534

@gsnedders

Description

@gsnedders

Very similar to #3531, spotted after looking through the rest of the file.

s[PY_SSIZE_T_MAX:PY_SSIZE_T_MIN].decode('UTF-8')

…this hits a signed integer overflow, which is undefined behaviour, and can cause a crash (or whatever, give it's UB)

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions