Jan Sturm 7e1098befe py/objdeque: Fix buffer overflow in deque_subscr. ...

In `deque_subscr()`, if `index_val` equals `self->alloc`, the index
correction `index_val -= self->alloc` does not execute, leading to an
out-of-bounds access in `self->items[index_val]`.

The fix in this commit ensures that the index correction is applied
whenever `index_val >= self->alloc`, preventing access beyond the allocated
buffer size.

Signed-off-by: Jan Sturm <jansturm92@googlemail.com>

2024-11-04 11:21:56 +11:00

9.3 KiB

Raw Permalink Blame History

View Raw