Issue #23321: Fixed a crash in str.decode() when error handler returned

replacment string longer than mailformed input data.

diff --cc Misc/NEWS
index 163aff47c5729d3412d889a13cb28f3490b04219,4c4db0f9b0b25e11330add530bf8216a1084bc41..3c083630e5a150bd83673d252635e7e790952a2d
--- 1/Misc/NEWS
--- 2/Misc/NEWS
+++ b/Misc/NEWS
@@@ -10,19 -11,9 +10,22 @@@ Release date: TB
  Core and Builtins
  -----------------
  
+ - Issue #23321: Fixed a crash in str.decode() when error handler returned
+   replacment string longer than mailformed input data.
+ 
 +- Issue #22286: The "backslashreplace" error handlers now works with
 +  decoding and translating.
 +
 +- Issue #23253: Delay-load ShellExecute[AW] in os.startfile for reduced
 +  startup overhead on Windows.
 +
 +- Issue #22038: pyatomic.h now uses stdatomic.h or GCC built-in functions for
 +  atomic memory access if available. Patch written by Vitor de Lima and Gustavo
 +  Temple.
 +
 +- Issue #20284: %-interpolation (aka printf) formatting added for bytes and
 +  bytearray.
 +
  - Issue #23048: Fix jumping out of an infinite while loop in the pdb.
  
  - Issue #20335: bytes constructor now raises TypeError when encoding or errors

diff --cc Objects/unicodeobject.c
Simple merge