commit 67dafd5c202cd529e209bf3f35e022ce766709eb
author Benjamin Peterson <benjamin@python.org> Thu Aug 23 22:28:39 2018 -0700
committer GitHub <noreply@github.com> Thu Aug 23 22:28:39 2018 -0700
tree f88ab52669231201975fca93a38ebf5afb3d4e46
parent 45ee452751d095d665717bafb61cfd7c65b729b4

[2.7] Issue GH-18560: Fix potential NULL pointer dereference in sum(). (GH-8892)

(cherry picked from commit 704e2d374f88bca83339b95d559b0abce12dc6bd)

Co-authored-by: Christian Heimes <christian@cheimes.de>

Python/bltinmodule.c

diff --git a/Python/bltinmodule.c b/Python/bltinmodule.c
index 21f6e66..4b819da 100644
--- a/Python/bltinmodule.c
+++ b/Python/bltinmodule.c
@@ -2363,6 +2363,11 @@
             }
             /* Either overflowed or is not an int. Restore real objects and process normally */
             result = PyInt_FromLong(i_result);
+            if (result == NULL) {
+                Py_DECREF(item);
+                Py_DECREF(iter);
+                return NULL;
+            }
             temp = PyNumber_Add(result, item);
             Py_DECREF(result);
             Py_DECREF(item);