Matt Bandy <matt.ba...@thq.com> added the comment:

That should probably be:

#define Py_ADDRESS_IN_RANGE(P, POOL)                    \
        ((x = (POOL)->arenaindex) < maxarenas &&                \
         (uptr)(P) - arenas[x].address < (uptr)ARENA_SIZE && \
         arenas[x].address != 0)

The address in the arena shouldn't change since it does belong to Python, so no 
one should be monkeying with it without the GIL.  The arenaindex is vulnerable 
since POOL can point to something not owned by Python.

----------

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue8020>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to