in scan_once, prevent the reading of arbitrary memory when passed a negative index
Bug reported by Guido Vranken.
diff --git a/Misc/NEWS b/Misc/NEWS
index 7fef5b5..79eaada 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -43,6 +43,9 @@
Library
-------
+- Fix arbitrary memory access in JSONDecoder.raw_decode with a negative second
+ parameter. Bug reported by Guido Vranken.
+
- Issue #21172: isinstance check relaxed from dict to collections.Mapping.
- Issue #21191: In os.fdopen, alwyas close the file descriptor when an exception