Matt Bandy <matt.ba...@thq.com> added the comment: That should probably be:
#define Py_ADDRESS_IN_RANGE(P, POOL) \ ((x = (POOL)->arenaindex) < maxarenas && \ (uptr)(P) - arenas[x].address < (uptr)ARENA_SIZE && \ arenas[x].address != 0) The address in the arena shouldn't change since it does belong to Python, so no one should be monkeying with it without the GIL. The arenaindex is vulnerable since POOL can point to something not owned by Python. ---------- _______________________________________ Python tracker <rep...@bugs.python.org> <http://bugs.python.org/issue8020> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com