Fix OOB read in getlist() and putdata() when len overstates length - #9893

Open

lazerg wants to merge 8 commits into

python-pillow:mainfrom

lazerg:fix/issue-9892-getlist-putdata-oob-read

Commits on Aug 23, 2026

Fix OOB read in getlist() and putdata() when __len__ overstates length
lazerg
committed
da63372
Reject mismatched-length sequences before materializing them
lazerg
committed
bab52a8

Commits on Aug 30, 2026

Add regression tests for getlist()/putdata() pre-check branches
lazerg
committed
3fced9b
Only swallow the unsized-sequence error in the length pre-check
lazerg
committed
a09841d

Commits on Sep 4, 2026

Merge branch 'main' into fix/issue-9892-getlist-putdata-oob-read
radarhere
authored
92ee701

Commits on Sep 11, 2026

Fix up unsized-sequence test comment
lazerg
committed
afe3354
Allow TypeError to be raised
radarhere
committed
c57e85d

Commits on Sep 15, 2026

Merge branch 'main' into fix/issue-9892-getlist-putdata-oob-read
radarhere
committed
29d33ce