Bug report

Bug description:

_curses.window.instr is meant to extract a string of characters between two positions and we have a maximum number of allowed characters which is 1023. However, this limit isnot enforced, namely we do the following:

winnstr(self->win,rtn,Py_MIN(n,1023));

IOW, we cannot return more than 1023 characters in a single API call. This should be documented and enforced at runtime, so that users may know that they need multiple API calls, or we should allocate heap memory instead (currently the buffer holding the output is allocated on the stack).

CPython versions tested on:

CPython main branch

Operating systems tested on:

No response

Linked PRs

• gh-134209: use heap-allocated memory in_curses.window.{instr,getstr} #134283
• [3.14] gh-134209: use heap-allocated memory in_curses.window.{instr,getstr} (GH-134283) #134391