You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.
total_args is determined from parameters that are user-controlled
(see r_object in [Python/marshal.c](https://github.com/python/cpython/blob/main/Python/marshal.c), in the TYPE_CODE case,
the varnames tuple is indexed with a value in the range [0, total_args),
which could be larger than the range of valid indexes for varnames.
arg is now a bogus PyObject value, and causes a segfault in PyUnicode_Compare.
$ python3.4 --version
$ uname -a
Linux debian-8-amd64 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt9-3~deb8u1 (2015-04-24) x86_64 GNU/Linux