$NetBSD: patch-CVE-2014-7185,v 1.1 2014/10/27 20:11:34 drochner Exp $ http://bugs.python.org/issue21831 --- Objects/bufferobject.c.orig 2014-10-27 19:46:40.000000000 +0000 +++ Objects/bufferobject.c @@ -88,7 +88,7 @@ get_buf(PyBufferObject *self, void **ptr *size = count; else *size = self->b_size; - if (offset + *size > count) + if (*size > count - offset) *size = count - offset; } return 1;