commit fd78a6f7f8c507678238c7264f7426c3148b6a84
author Martin v. Löwis <martin@v.loewis.de> Fri Mar 04 14:37:01 2005 +0000
committer Martin v. Löwis <martin@v.loewis.de> Fri Mar 04 14:37:01 2005 +0000
tree f24796353b38b2cd2c28057f75296522cd44cbf5
parent a2a9888f22a7811938d2f708344e01dfc000841c

Patches #925152, #1118602: Avoid reading after the end of the buffer
in pyexpat.GetInputContext. Will backport to 2.4.

Modules/pyexpat.c

diff --git a/Modules/pyexpat.c b/Modules/pyexpat.c
index d359a74..e6c14f8 100644
--- a/Modules/pyexpat.c
+++ b/Modules/pyexpat.c
@@ -1082,7 +1082,7 @@
                 = XML_GetInputContext(self->itself, &offset, &size);
 
             if (buffer != NULL)
-                result = PyString_FromStringAndSize(buffer + offset, size);
+                result = PyString_FromStringAndSize(buffer + offset, size - offset);
             else {
                 result = Py_None;
                 Py_INCREF(result);