From 2324dfb3a955035ba503b6b712506e5a73caee51 Mon Sep 17 00:00:00 2001 From: Arvo Heinonen Date: Fri, 25 Jul 2025 16:53:33 +0300 Subject: [PATCH] Fix msg_len parameter type Incorrectly using int instead of Py_ssize_t for "s#" caused PyArg_ParseTuple to overflow and overwrite the fd parameter. --- _sctp.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/_sctp.c b/_sctp.c index aa0dca7..fa1493a 100644 --- a/_sctp.c +++ b/_sctp.c @@ -1663,7 +1663,8 @@ static PyObject* getladdrs(PyObject* dummy, PyObject* args) static PyObject* sctp_send_msg(PyObject* dummy, PyObject* args) { - int fd, msg_len, size_sent, ppid, flags, stream, ttl, context; + Py_ssize_t msg_len; + int fd, size_sent, ppid, flags, stream, ttl, context; const char *msg; char *to; int port;