commit 1e81a399a25edd23d76601c0c421bdad46b5c19c
author Victor Stinner <victor.stinner@gmail.com> Thu Dec 19 16:47:04 2013 +0100
committer Victor Stinner <victor.stinner@gmail.com> Thu Dec 19 16:47:04 2013 +0100
tree beaedf5a8b1782167295d366361600f3f7603e62
parent cb1f74ec405b81dd1319b616829dd576a48603f8

Issue #20025: ssl.RAND_bytes() and ssl.RAND_pseudo_bytes() now raise a
ValueError if num is negative (instead of raising a SystemError).

Modules/_ssl.c

diff --git a/Modules/_ssl.c b/Modules/_ssl.c
index 374d930..4b02d8d 100644
--- a/Modules/_ssl.c
+++ b/Modules/_ssl.c
@@ -2486,6 +2486,11 @@
     const char *errstr;
     PyObject *v;
 
+    if (len < 0) {
+        PyErr_SetString(PyExc_ValueError, "num must be positive");
+        return NULL;
+    }
+
     bytes = PyBytes_FromStringAndSize(NULL, len);
     if (bytes == NULL)
         return NULL;