[issue4462] result of PyList_GetItem() not validated

2008-11-29 Thread Raymond Hettinger
Raymond Hettinger <[EMAIL PROTECTED]> added the comment: PyObject *hook = PyList_GetItem(meta_path, i); loader = PyObject_CallMethod(hook, "find_module", "sO", fullname, path != NULL ? path : Py_None); The "hook" pointer is checked for NULL in PyObject_CallMethod() -- see line 1947 in Objects

[issue4462] result of PyList_GetItem() not validated

2008-11-29 Thread Brian Szuter
New submission from Brian Szuter <[EMAIL PROTECTED]>: Python-2.5.2/Python/import.c(find_module) Lines 1171 PyString_Check() is not called on the result of PyList_GetItem(), nor is the result checked to see if it is NULL. -- components: None messages: 76603 nosy: CWRU_Researcher1 severit