Issue #24620: Random.setstate() now validates the value of state last element.

diff --cc Misc/NEWS
index bced023faefec29604100b545144a16f0877a2cb,1a67632e9188cad8bb68de0ea7fd50da0384a8c0..b75beada46045d9e6410644391c213137a241032
--- 1/Misc/NEWS
--- 2/Misc/NEWS
+++ b/Misc/NEWS
@@@ -10,100 -10,82 +10,102 @@@ Release date: 2015-07-2
  Core and Builtins
  -----------------
  
 -- Issue #24467: Fixed possible buffer over-read in bytearray. The bytearray
 -  object now always allocates place for trailing null byte and it's buffer now
 -  is always null-terminated.
 +- Issue #23573: Restored optimization of bytes.rfind() and bytearray.rfind()
 +  for single-byte argument on Linux.
  
 -- Issue #24115: Update uses of PyObject_IsTrue(), PyObject_Not(),
 -  PyObject_IsInstance(), PyObject_RichCompareBool() and _PyDict_Contains()
 -  to check for and handle errors correctly.
 +- Issue #24569: Make PEP 448 dictionary evaluation more consistent.
  
 -- Issue #24257: Fixed system error in the comparison of faked
 -  types.SimpleNamespace.
 +- Issue #24583: Fix crash when set is mutated while being updated.
  
 -- Issue #22939: Fixed integer overflow in iterator object.  Patch by
 -  Clement Rouault.
 +- Issue #24407: Fix crash when dict is mutated while being updated.
  
 -- Issue #23985: Fix a possible buffer overrun when deleting a slice from
 -  the front of a bytearray and then appending some other bytes data.
 +- Issue #24619: New approach for tokenizing async/await. As a consequence,
 +  is is now possible to have one-line 'async def foo(): await ..' functions.
  
 -- Issue #24102: Fixed exception type checking in standard error handlers.
 +- Issue #24687: Plug refleak on SyntaxError in function parameters
 +  annotations.
  
 -- Issue #23757:  PySequence_Tuple() incorrectly called the concrete list API
 -  when the data was a list subclass.
 +Library
 +-------
  
 -- Issue #24407: Fix crash when dict is mutated while being updated.
++- Issue #24620: Random.setstate() now validates the value of state last element.
+ 
 -- Issue #24096: Make warnings.warn_explicit more robust against mutation of the
 -  warnings.filters list.
 +- Issue #22485: Fixed an issue that caused `inspect.getsource` to return incorrect
 +  results on nested functions.
  
 -- Issue #23996: Avoid a crash when a delegated generator raises an
 -  unnormalized StopIteration exception.  Patch by Stefan Behnel.
 +- Issue #22153: Improve unittest docs. Patch from Martin Panter and evilzero.
  
 -- Issue #24022: Fix tokenizer crash when processing undecodable source code.
 +- Issue #24580: Symbolic group references to open group in re patterns now are
 +  explicitly forbidden as well as numeric group references.
  
 -- Issue #23309: Avoid a deadlock at shutdown if a daemon thread is aborted
 -  while it is holding a lock to a buffered I/O object, and the main thread
 -  tries to use the same I/O object (typically stdout or stderr).  A fatal
 -  error is emitted instead.
 +- Issue #24206: Fixed __eq__ and __ne__ methods of inspect classes.
  
 -- Issue #22977: Fixed formatting Windows error messages on Wine.
 -  Patch by Martin Panter.
 +- Issue #24631: Fixed regression in the timeit module with multiline setup.
  
 -- Issue #23803: Fixed str.partition() and str.rpartition() when a separator
 -  is wider then partitioned string.
 +- Issue #18622: unittest.mock.mock_open().reset_mock would recurse infinitely.
 +  Patch from Nicola Palumbo and Laurent De Buyst.
  
 -- Issue #23192: Fixed generator lambdas.  Patch by Bruno Cauet.
 +- Issue #23661: unittest.mock side_effects can now be exceptions again. This
 +  was a regression vs Python 3.4. Patch from Ignacio Rossi
  
 -- Issue #23629: Fix the default __sizeof__ implementation for variable-sized
 -  objects.
 +- Issue #24608: chunk.Chunk.read() now always returns bytes, not str.
  
 -- Issue #24044: Fix possible null pointer dereference in list.sort in out of
 -  memory conditions.
 +- Issue #18684: Fixed reading out of the buffer in the re module.
  
 -- Issue #21354: PyCFunction_New function is exposed by python DLL again.
 +- Issue #24259: tarfile now raises a ReadError if an archive is truncated
 +  inside a data segment.
  
 -Library
 --------
 +- Issue #15014: SMTP.auth() and SMTP.login() now support RFC 4954's optional
 +  initial-response argument to the SMTP AUTH command.
  
 -- Issue #24620: Random.setstate() now validates the value of state last element.
 +- Issue #24669: Fix inspect.getsource() for 'async def' functions.
 +  Patch by Kai Groner.
  
 -- Issue #22153: Improve unittest docs. Patch from Martin Panter and evilzero.
 +- Issue #24688: ast.get_docstring() for 'async def' functions.
  
 -- Issue #24206: Fixed __eq__ and __ne__ methods of inspect classes.
 +Build
 +-----
  
 -- Issue #21750: mock_open.read_data can now be read from each instance, as it
 -  could in Python 3.3.
 +- Issue #24603: Update the Windows build to use OpenSSL 1.0.2d.
  
 -- Issue #23247: Fix a crash in the StreamWriter.reset() of CJK codecs.
  
 -- Issue #18622: unittest.mock.mock_open().reset_mock would recurse infinitely.
 -  Patch from Nicola Palumbo and Laurent De Buyst.
 +What's New in Python 3.5.0 beta 3?
 +==================================
  
 -- Issue #24608: chunk.Chunk.read() now always returns bytes, not str.
 +Release date: 2015-07-05
  
 -- Issue #18684: Fixed reading out of the buffer in the re module.
 +Core and Builtins
 +-----------------
  
 -- Issue #24259: tarfile now raises a ReadError if an archive is truncated
 -  inside a data segment.
 +- Issue #24467: Fixed possible buffer over-read in bytearray. The bytearray
 +  object now always allocates place for trailing null byte and it's buffer now
 +  is always null-terminated.
 +
 +- Upgrade to Unicode 8.0.0.
 +
 +- Issue #24345: Add Py_tp_finalize slot for the stable ABI.
 +
 +- Issue #24400: Introduce a distinct type for PEP 492 coroutines; add
 +  types.CoroutineType, inspect.getcoroutinestate, inspect.getcoroutinelocals;
 +  coroutines no longer use CO_GENERATOR flag; sys.set_coroutine_wrapper
 +  works only for 'async def' coroutines; inspect.iscoroutine no longer
 +  uses collections.abc.Coroutine, it's intended to test for pure 'async def'
 +  coroutines only; add new opcode: GET_YIELD_FROM_ITER; fix generators wrapper
 +  used in types.coroutine to be instance of collections.abc.Generator;
 +  collections.abc.Awaitable and collections.abc.Coroutine can no longer
 +  be used to detect generator-based coroutines--use inspect.isawaitable
 +  instead.
 +
 +- Issue #24450: Add gi_yieldfrom to generators and cr_await to coroutines.
 +  Contributed by Benno Leslie and Yury Selivanov.
 +
 +- Issue #19235: Add new RecursionError exception. Patch by Georg Brandl.
 +
 +Library
 +-------
 +
 +- Issue #21750: mock_open.read_data can now be read from each instance, as it
 +  could in Python 3.3.
  
  - Issue #24552: Fix use after free in an error case of the _pickle module.
  

diff --cc Modules/_randommodule.c
Simple merge