Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

bpo-15108: Prevent accessing the result tuple from Python in PySequence_Tuple#24510

Closed
pablogsal wants to merge 1 commit into
python:masterpython/cpython:masterfrom
pablogsal:bpo-15108pablogsal/cpython:bpo-15108Copy head branch name to clipboard
Closed

bpo-15108: Prevent accessing the result tuple from Python in PySequence_Tuple#24510
pablogsal wants to merge 1 commit into
python:masterpython/cpython:masterfrom
pablogsal:bpo-15108pablogsal/cpython:bpo-15108Copy head branch name to clipboard

Conversation

@pablogsal

@pablogsal pablogsal commented Feb 12, 2021

Copy link
Copy Markdown
Member

Comment thread Objects/abstract.c

// bpo-15108: Code can access the result tuple while being
// incomplete when calling PyIter_Next().
PyObject_GC_UnTrack(result);

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would prefer to add a new API to create an untracked tuple: https://bugs.python.org/issue15108#msg387029

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's discuss int the issue, then I can modify the PR :)

@rhettinger

Copy link
Copy Markdown
Contributor

FWIW: Traditionally any "crasher" that depended on gc.get_referrers was not considered a bug. These do not seem to affect "normal code" and are hard to fix without doing brain surgery to Python.

@pablogsal

Copy link
Copy Markdown
Member Author

Yeah, I have to say that I am not very convinced about this change because it also fixes a bigger problem only on one place.

What worries me the most here is not using gc.get_referrers, but the GC crashing because it does a GC pass when the tuple is invalid.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants

Morty Proxy This is a proxified and sanitized view of the page, visit original site.