https://github.com/python/cpython/commit/e2f376f284b7bf1388d85e99dce646cabc507016 commit: e2f376f284b7bf1388d85e99dce646cabc507016 branch: 3.7 author: Miss Islington (bot) <31488909+miss-islington at users.noreply.github.com> committer: GitHub <noreply at github.com> date: 2018年12月05日T11:35:41-08:00 summary: bpo-34987: Fix a possible null pointer dereference in _pickle.c's save_reduce(). (GH-9886) (cherry picked from commit 25d389789c59a52a31770f7c50ce9e02a8909190) Co-authored-by: Zackery Spytz <zspytz at gmail.com> files: M Modules/_pickle.c diff --git a/Modules/_pickle.c b/Modules/_pickle.c index a1a90bd95cae..57bb771addde 100644 --- a/Modules/_pickle.c +++ b/Modules/_pickle.c @@ -3838,7 +3838,10 @@ save_reduce(PicklerObject *self, PyObject *args, PyObject *obj) if (obj != NULL) { obj_class = get_class(obj); - p = obj_class != cls; /* true iff a problem */ + if (obj_class == NULL) { + return -1; + } + p = obj_class != cls; Py_DECREF(obj_class); if (p) { PyErr_SetString(st->PicklingError, "args[0] from "