bpo-36367: Free buffer if realloc fails in tokenize.c (GH-12442) (GH-12471)
diff --git a/Parser/tokenizer.c b/Parser/tokenizer.c
index 1a36f1c..34722f8 100644
--- a/Parser/tokenizer.c
+++ b/Parser/tokenizer.c
@@ -733,9 +733,14 @@
}
*current = '\0';
final_length = current - buf + 1;
- if (final_length < needed_length && final_length)
+ if (final_length < needed_length && final_length) {
/* should never fail */
- buf = PyMem_REALLOC(buf, final_length);
+ char* result = PyMem_REALLOC(buf, final_length);
+ if (result == NULL) {
+ PyMem_FREE(buf);
+ }
+ buf = result;
+ }
return buf;
}
@@ -1050,6 +1055,7 @@
newbuf = (char *)PyMem_REALLOC(newbuf,
newsize);
if (newbuf == NULL) {
+ PyMem_FREE(tok->buf);
tok->done = E_NOMEM;
tok->cur = tok->inp;
return EOF;