Cleanup logic a little. Check args first, then try to create the

object.  This avoids creation + decref if bogus arguments are passed.

Modules/shamodule.c

@@ -492,15 +492,14 @@ SHA_new(PyObject *self, PyObject *args, PyObject *kwdict)
     unsigned char *cp = NULL;
     int len;
 
-    if ((new = newSHAobject()) == NULL)
-        return NULL;
-
     if (!PyArg_ParseTupleAndKeywords(args, kwdict, "|s#:new", kwlist,
                                      &cp, &len)) {
-        Py_DECREF(new);
         return NULL;
     }
 
+    if ((new = newSHAobject()) == NULL)
+        return NULL;
+
     sha_init(new);
 
     if (PyErr_Occurred()) {