From: Benjamin Peterson <benjamin@python.org>
Date: Sat, 15 Mar 2014 02:54:31 +0000 (-0500)
Subject: avoid referencing out-of-bounds memory
X-Git-Tag: v3.4.1rc1~233^2~14^2
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=ef87f8cb57e147b48665c06b41ac10b5cf4904c4;p=python

avoid referencing out-of-bounds memory
---

diff --git a/Objects/listobject.c b/Objects/listobject.c
index 143c7b3788..5f3e282827 100644
--- a/Objects/listobject.c
+++ b/Objects/listobject.c
@@ -2036,7 +2036,7 @@ fail:
     if (keys != NULL) {
         for (i = 0; i < saved_ob_size; i++)
             Py_DECREF(keys[i]);
-        if (keys != &ms.temparray[saved_ob_size+1])
+        if (saved_ob_size >= MERGESTATE_TEMP_SIZE/2)
             PyMem_FREE(keys);
     }