bpo-43693: Do not check co_cell2arg if a non-cell offset. (pythongh-26626)

ericsnowcurrently · web-flow · commit e6e34e45222b · 2021-06-09T11:40:49.000-06:00
This is the same fix as for PyFrame_LocalsToFast() in pythongh-26609, but applied to PyFrame_FastToLocalsWithError(). (It should have been in that PR.) https://bugs.python.org/issue43693
diff --git a/Objects/frameobject.c b/Objects/frameobject.c
@@ -981,7 +981,9 @@ PyFrame_FastToLocalsWithError(PyFrameObject *f)
         PyObject *value = fast[i];
         if (f->f_state != FRAME_CLEARED) {
             int cellargoffset = CO_CELL_NOT_AN_ARG;
-            if (co->co_cell2arg != NULL) {
+            if (kind & CO_FAST_CELL && co->co_cell2arg != NULL) {
+                assert(i - co->co_nlocals >= 0);
+                assert(i - co->co_nlocals < co->co_ncellvars);
                 cellargoffset = co->co_cell2arg[i - co->co_nlocals];
             }
             if (kind & CO_FAST_FREE) {
@@ -1093,7 +1095,8 @@ PyFrame_LocalsToFast(PyFrameObject *f, int clear)
         PyObject *oldvalue = fast[i];
         int cellargoffset = CO_CELL_NOT_AN_ARG;
         if (kind & CO_FAST_CELL && co->co_cell2arg != NULL) {
-            assert(i >= co->co_nlocals);
+            assert(i - co->co_nlocals >= 0);
+            assert(i - co->co_nlocals < co->co_ncellvars);
             cellargoffset = co->co_cell2arg[i - co->co_nlocals];
         }
         PyObject *cell = NULL;
