commit 178f0b6ddcae040c235188b49c1f6defc76588ca
author Serhiy Storchaka <storchaka@gmail.com> Fri Jul 24 09:02:53 2015 +0300
committer Serhiy Storchaka <storchaka@gmail.com> Fri Jul 24 09:02:53 2015 +0300
tree 44fdcf3d5091a66897eaba20dad10610960785b9
parent f79dfe3f250bab3375120e4f30643abac08b652d

Issue #24620: Random.setstate() now validates the value of state last element.

Modules/_randommodule.c

diff --git a/Modules/_randommodule.c b/Modules/_randommodule.c
index 4377ee0..416e266 100644
--- a/Modules/_randommodule.c
+++ b/Modules/_randommodule.c
@@ -340,6 +340,10 @@
     index = PyLong_AsLong(PyTuple_GET_ITEM(state, i));
     if (index == -1 && PyErr_Occurred())
         return NULL;
+    if (index < 0 || index > N) {
+        PyErr_SetString(PyExc_ValueError, "invalid state");
+        return NULL;
+    }
     self->index = (int)index;
 
     Py_INCREF(Py_None);