commit 26861b0b29fdf64fba8cd120183408495f2c80e2
author Serhiy Storchaka <storchaka@gmail.com> Mon Feb 16 20:52:17 2015 +0200
committer Serhiy Storchaka <storchaka@gmail.com> Mon Feb 16 20:52:17 2015 +0200
tree 68aa9e4560327db352dcbda56bf3ea0325bde0f7
parent 4d0d9829851915e97ae392dd803976be6c95c8d1

Issue #23450: Fixed possible integer overflows.

Objects/bytesobject.c

diff --git a/Objects/bytesobject.c b/Objects/bytesobject.c
index 30b0e50..b015974 100644
--- a/Objects/bytesobject.c
+++ b/Objects/bytesobject.c
@@ -673,7 +673,7 @@
                             "* wants int");
                         goto error;
                     }
-                    prec = PyLong_AsSsize_t(v);
+                    prec = _PyLong_AsInt(v);
                     if (prec == -1 && PyErr_Occurred())
                         goto error;
                     if (prec < 0)

Objects/obmalloc.c

diff --git a/Objects/obmalloc.c b/Objects/obmalloc.c
index e900cc3..7cc889f 100644
--- a/Objects/obmalloc.c
+++ b/Objects/obmalloc.c
@@ -1339,7 +1339,7 @@
         pool = (poolp)usable_arenas->pool_address;
         assert((block*)pool <= (block*)usable_arenas->address +
                                ARENA_SIZE - POOL_SIZE);
-        pool->arenaindex = usable_arenas - arenas;
+        pool->arenaindex = (uint)(usable_arenas - arenas);
         assert(&arenas[pool->arenaindex] == usable_arenas);
         pool->szidx = DUMMY_SIZE_IDX;
         usable_arenas->pool_address += POOL_SIZE;