commit 755d4ef8243050e5ff973524633caebd0ce03af9
author Sergey Fedoseev <fedoseev.sergey@gmail.com> Tue Sep 10 01:40:58 2019 +0500
committer T. Wouters <thomas@python.org> Mon Sep 09 13:40:58 2019 -0700
tree 027ad798be7f4f621a8d42569609a6b189f2a929
parent 832e8640086ac4fa547c055a72929879cc5a963a

Correct overflow check in PyTuple_New() (GH-14838)

Objects/tupleobject.c

diff --git a/Objects/tupleobject.c b/Objects/tupleobject.c
index a72257f..08f7022 100644
--- a/Objects/tupleobject.c
+++ b/Objects/tupleobject.c
@@ -120,8 +120,8 @@
 #endif
     {
         /* Check for overflow */
-        if ((size_t)size > ((size_t)PY_SSIZE_T_MAX - sizeof(PyTupleObject) -
-                    sizeof(PyObject *)) / sizeof(PyObject *)) {
+        if ((size_t)size > ((size_t)PY_SSIZE_T_MAX - (sizeof(PyTupleObject) -
+                    sizeof(PyObject *))) / sizeof(PyObject *)) {
             return (PyTupleObject *)PyErr_NoMemory();
         }
         op = PyObject_GC_NewVar(PyTupleObject, &PyTuple_Type, size);