commit f670120cb76f0aa66ec29c683e740eddcf45ca4a
author Benjamin Peterson <benjamin@python.org> Sat Aug 13 18:15:28 2016 -0700
committer Benjamin Peterson <benjamin@python.org> Sat Aug 13 18:15:28 2016 -0700
tree a90f2e3e14810f6a4c01b4df484654715cc95c5f
parent d81ad0df717d21867c676f8dee454a9df2f6aece

do not allow reading negative values with getstr()

Modules/_cursesmodule.c

diff --git a/Modules/_cursesmodule.c b/Modules/_cursesmodule.c
index b914e5f6..d0d7479 100644
--- a/Modules/_cursesmodule.c
+++ b/Modules/_cursesmodule.c
@@ -918,6 +918,10 @@
     case 1:
         if (!PyArg_ParseTuple(args,"i;n", &n))
             return NULL;
+        if (n < 0) {
+            PyErr_SetString(PyExc_ValueError, "'n' must be nonnegative");
+            return NULL;
+        }
         Py_BEGIN_ALLOW_THREADS
         rtn2 = wgetnstr(self->win,rtn,MIN(n, 1023));
         Py_END_ALLOW_THREADS
@@ -936,6 +940,10 @@
     case 3:
         if (!PyArg_ParseTuple(args,"iii;y,x,n", &y, &x, &n))
             return NULL;
+        if (n < 0) {
+            PyErr_SetString(PyExc_ValueError, "'n' must be nonnegative");
+            return NULL;
+        }
 #ifdef STRICT_SYSV_CURSES
         Py_BEGIN_ALLOW_THREADS
         rtn2 = wmove(self->win,y,x)==ERR ? ERR :