This issue tracker has been migrated to GitHub ,
and is currently read-only.
For more information,
see the GitHub FAQs in the Python's Developer Guide.
Created on 2015年05月01日 13:57 by pkt, last changed 2022年04月11日 14:58 by admin. This issue is now closed.
| Files | ||||
|---|---|---|---|---|
| File name | Uploaded | Description | Edit | |
| poc_elt_extend2.py | pkt, 2015年05月01日 13:57 | |||
| Messages (2) | |||
|---|---|---|---|
| msg242306 - (view) | Author: paul (pkt) | Date: 2015年05月01日 13:57 | |
# Program received signal SIGSEGV, Segmentation fault. # 0x4063cf19 in element_extend (self=0x405ddf74, args=([],)) at /home/p/Python-3.4.1/Modules/_elementtree.c:1056 # 1056 PyObject* element = PySequence_Fast_GET_ITEM(seq, i); # (gdb) print i # 3ドル = 1337 # (gdb) print *(PyListObject*)seq # 4ドル = {ob_base = {ob_base = {_ob_next = 0x406373ec, _ob_prev = 0x405ddf74, ob_refcnt = 3, ob_type = 0x830e1c0 <PyList_Type>}, # ob_size = 0}, ob_item = 0x0, allocated = 0} # # Controlled read (resulting from a use after free). "seq" is cleared in a custom # destructor (Y.__del__()). # |
|||
| msg242431 - (view) | Author: Serhiy Storchaka (serhiy.storchaka) * (Python committer) | Date: 2015年05月02日 20:36 | |
The patch for issue24091 fixes this issue. |
|||
| History | |||
|---|---|---|---|
| Date | User | Action | Args |
| 2022年04月11日 14:58:16 | admin | set | github: 68280 |
| 2015年05月03日 06:43:54 | Arfrever | set | nosy:
+ Arfrever |
| 2015年05月02日 20:36:25 | serhiy.storchaka | set | status: open -> closed superseder: Use after free in Element.extend (1) messages: + msg242431 resolution: duplicate stage: needs patch -> resolved |
| 2015年05月02日 04:45:59 | serhiy.storchaka | set | nosy:
+ scoder, eli.bendersky, serhiy.storchaka |
| 2015年05月01日 14:13:25 | christian.heimes | set | stage: needs patch components: + Extension Modules versions: + Python 3.5 |
| 2015年05月01日 14:11:23 | christian.heimes | set | nosy:
+ christian.heimes |
| 2015年05月01日 13:57:05 | pkt | create | |