python - fix buffer overflows in unicode processing and elsewhere

Modules/selectmodule.c

 /* select - Module containing unix select(2) call.
    Under Unix, the file descriptors are small integers.
    Under Win32, select only exists for sockets, and sockets may
    have any value except INVALID_SOCKET.
    Under BeOS, we suffer the same dichotomy as Win32; sockets can be anything
    >= 0.
 */
 
 #include "Python.h"
 #include <structmember.h>
@@ skipping 331 matching lines @@
 
 /* Update the malloc'ed array of pollfds to match the dictionary 
    contained within a pollObject.  Return 1 on success, 0 on an error.
 */
 
 static int
 update_ufd_array(pollObject *self)
 {
         Py_ssize_t i, pos;
         PyObject *key, *value;
+        struct pollfd *old_ufds = self->ufds;
 
         self->ufd_len = PyDict_Size(self->dict);
-        PyMem_Resize(self->ufds, struct pollfd, self->ufd_len);
+        PyMem_RESIZE(self->ufds, struct pollfd, self->ufd_len);
         if (self->ufds == NULL) {
+                self->ufds = old_ufds;
                 PyErr_NoMemory();
                 return 0;
         }
 
         i = pos = 0;
         while (PyDict_Next(self->dict, &pos, &key, &value)) {
                 self->ufds[i].fd = PyInt_AsLong(key);
                 self->ufds[i].events = (short)PyInt_AsLong(value);
                 i++;
         }
@@ skipping 1506 matching lines @@
 
         /* NETDEV filter flags */
 #ifdef EVFILT_NETDEV
         PyModule_AddIntConstant(m, "KQ_NOTE_LINKUP", NOTE_LINKUP);
         PyModule_AddIntConstant(m, "KQ_NOTE_LINKDOWN", NOTE_LINKDOWN);
         PyModule_AddIntConstant(m, "KQ_NOTE_LINKINV", NOTE_LINKINV);
 #endif
 
 #endif /* HAVE_KQUEUE */
 }