https://gcc.gnu.org/bugzilla/show_bug.cgi?id=69533

--- Comment #6 from Richard Biener <rguenth at gcc dot gnu.org> ---
Ugh, totally insufficient patch.  Probably warrants a CVE, I'm sure some of
them we optimized before, like

 old_size = sz;
 sz += a;
 if (sz < old_size)
   ...

I'll dig further (just look for PyExc_OverflowError) and when I get the
testsuite clean bug our security guys with a patch.

Reply via email to