commit 3b77d01dbc9e7cf8e32803a307f2ecf7b2bf0f05
author Serhiy Storchaka <storchaka@gmail.com> Fri Jul 24 09:02:53 2015 +0300
committer Serhiy Storchaka <storchaka@gmail.com> Fri Jul 24 09:02:53 2015 +0300
tree c068f5321f638951218d1d980c0e1d851fb245b1
parent affac0062dfdca716f4dc9228476b06a516c032b

Issue #24620: Random.setstate() now validates the value of state last element.

Modules/_randommodule.c

diff --git a/Modules/_randommodule.c b/Modules/_randommodule.c
index 8bb9e37..480df92 100644
--- a/Modules/_randommodule.c
+++ b/Modules/_randommodule.c
@@ -363,6 +363,10 @@
     index = PyLong_AsLong(PyTuple_GET_ITEM(state, i));
     if (index == -1 && PyErr_Occurred())
         return NULL;
+    if (index < 0 || index > N) {
+        PyErr_SetString(PyExc_ValueError, "invalid state");
+        return NULL;
+    }
     self->index = (int)index;
 
     Py_INCREF(Py_None);