The interpreter sometimes segfaults when running the test suite, in test_imageop. A more reliable crasher is: >>> import imageop >>> s = "A" * 32000 >>> imageop.rgb2rgb8(s, 1, len(s)) The failure was recently introduced by r66689, a "security fix" :-( and backported today in 2.4! This is a 2.4 release blocker. Patch is attached, please review.
When I wrote my patch to fix division by zero (and detection of -n * -n overflow), I also wrote a script to test imageop module. I fixed the limit of the input string to 1024 bytes, and so the rgb crash was not detected. Here is my script with a limit of 2^20 bytes which raise the crash. With the patch, there are no more crash ;-)
