Message397553
| Author |
twouters |
| Recipients |
Anthony Sottile, ammar2, christian.heimes, erlendaasland, miss-islington, pablogsal, paul.moore, shreyanavigyan, stestagg, steve.dower, tim.golden, twouters, vstinner, zach.ware |
| Date |
2021年07月15日.14:07:59 |
| SpamBayes Score |
-1.0 |
| Marked as misclassified |
Yes |
| Message-id |
<1626358079.58.0.0315611449183.issue44184@roundup.psfhosted.org> |
| In-reply-to |
| Content |
Reopening this issue, as there is another branch (for non-GC heaptypes) earlier in subtype_dealloc that I believe suffers from the same problem. Actually triggering the error in a test has been difficult because as far as I can tell it relies on garbage collection at the right time, but reading the code it seems clear it's problematic. I'll prepare a PR to fix it there.
I'm also reopening this issue because I believe it should've been backported to 3.9, and possibly 3.8 (if it's considered a security problem to get python to read and write freed memory). I found this issue in 3.9 while debugging a pybind11 crash. I'll backport after the other PR is in (or rejected). |
|
History
|
|---|
| Date |
User |
Action |
Args |
| 2021年07月15日 14:07:59 | twouters | set | recipients:
+ twouters, paul.moore, vstinner, christian.heimes, tim.golden, zach.ware, steve.dower, Anthony Sottile, ammar2, pablogsal, miss-islington, erlendaasland, stestagg, shreyanavigyan |
| 2021年07月15日 14:07:59 | twouters | set | messageid: <1626358079.58.0.0315611449183.issue44184@roundup.psfhosted.org> |
| 2021年07月15日 14:07:59 | twouters | link | issue44184 messages |
| 2021年07月15日 14:07:59 | twouters | create |
|