]> granicus.if.org Git - python/commit
Even though _Py_Mangle() isn't truly public anyone can call it and
authorNeal Norwitz <nnorwitz@gmail.com>
Sat, 12 Aug 2006 01:45:47 +0000 (01:45 +0000)
committerNeal Norwitz <nnorwitz@gmail.com>
Sat, 12 Aug 2006 01:45:47 +0000 (01:45 +0000)
commit84167d09cd3e97bff3e750d0dcb0d2d440c6fc2e
treeb5cd5e937df16c7101403e616939786b8b424ca5
parent6f5ff3f3eb7abc2f4750c1319b560f67faf546ac
Even though _Py_Mangle() isn't truly public anyone can call it and
there was no verification that privateobj was a PyString.  If it wasn't
a string, this could have allowed a NULL pointer to creep in below and crash.

I wonder if this should be PyString_CheckExact?  Must identifiers be strings
or can they be subclasses?

Klocwork #275
Python/compile.c