[issue7788] segfault when deleting from a list using slice with very big `step' value

[Mark Dickinson]

Mark Dickinson <dickinsm at gmail.com> added the comment:

There's a suspicious looking test in list_ass_subscript in Objects/listobject.c:

if (cur + step >= Py_SIZE(self)) {
	lim = Py_SIZE(self) - cur - 1;
}

I think what's happening here is that cur + step is overflowing, so that the test fails.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue7788>
_______________________________________