Repository navigation
Fix minor safety issues #159739
Copy link
Copy link
Open
Labels
extension-modulesC modules in the Modules dirC modules in the Modules dirinterpreter-core(Objects, Python, Grammar, and Parser dirs)(Objects, Python, Grammar, and Parser dirs)type-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or error
Description
Bug report
I had a model look for security issues and it found a lot of things that are probably not exploitable but real edge-case C bugs. I'll open PRs for these (after manual review) and merge the fixes.
CPython versions tested on:
CPython main branch
Operating systems tested on:
macOS
Linked PRs
- gh-159739: Release SSL resources on error paths #159745
- gh-159739: Check character formatting allocation failure #159746
- gh-159739: Handle interpreter configuration encoding errors #159747
- gh-159739: Handle module filename encoding errors #159749
- gh-159739: Propagate macOS proxy conversion errors #159750
- gh-159739: Preserve the syntax error if metadata allocation fails #159751
- gh-159739: Release resources on interpreter startup error paths #159752
- gh-159739: Release tuple items if resizing fails #159754
- gh-159739: Preserve the normalization buffer on allocation failure #159755
- gh-159739: Fix reference and error handling in warnings #159758
- [3.15] gh-159739: Release SSL resources on error paths (GH-159745) #159761
- [3.14] gh-159739: Release SSL resources on error paths (GH-159745) #159762
- gh-159739: Preserve the full maxlen when copying deque subclasses #159765
- gh-159739: Read resized ctypes scalars using their declared size #159767
- gh-159739: Skip code-extra cleanup callbacks for NULL data #159768
- gh-159739: Release replaced PyInitConfig strings #159769
- gh-159739: [typing] Handle generic alias construction errors #159772
- gh-159739: Initialize template iterator references before allocating #159773
- gh-159739: Handle OrderedDict item iterator allocation failures #159774
- gh-159739: Handle overlapping buffers in BytesIO.readinto #159777
- gh-159739: Track group records for cyclic garbage collection #159778
- gh-159739: Reject the minimum dynamic formatting width #159780
- gh-159739: Avoid leaking references during free-threaded GC enumeration #159781
- gh-159739: Bound encoding-name lookahead in surrogatepass #159785
- [3.15] gh-159739: Release tuple items if resizing fails (GH-159754) #159787
- [3.14] gh-159739: Release tuple items if resizing fails (GH-159754) #159788
- [3.15] gh-159739: Release resources on interpreter startup error paths (GH-159752) #159793
- [3.14] gh-159739: Release resources on interpreter startup error paths (GH-159752) #159794
- gh-159739: Fix crash in _PyTuple_Resize() with an invalid size #159804
- [3.15] gh-159739: Release replaced PyInitConfig strings (GH-159769) #159809
- [3.14] gh-159739: Release replaced PyInitConfig strings (GH-159769) #159810
- [3.15] gh-159739: Check character formatting allocation failure (GH-159746) #159839
- [3.14] gh-159739: Check character formatting allocation failure (GH-159746) #159840
- [3.15] gh-159739: Handle module filename encoding errors (GH-159749) #159841
- [3.14] gh-159739: Handle module filename encoding errors (GH-159749) #159842
- [3.15] gh-159739: Handle interpreter configuration encoding errors (GH-159747) #159843
- [3.14] gh-159739: Handle interpreter configuration encoding errors (GH-159747) #159844
- [3.15] gh-159739: Preserve the syntax error if metadata allocation fails (GH-159751) #159845
- [3.14] gh-159739: Preserve the syntax error if metadata allocation fails (GH-159751) #159846
- [3.15] gh-159739: Preserve the full maxlen when copying deque subclasses (GH-159765) #159896
- [3.14] gh-159739: Preserve the full maxlen when copying deque subclasses (GH-159765) #159897
- [3.15] gh-159739: Read resized ctypes scalars using their declared size (GH-159767) #159898
- [3.14] gh-159739: Read resized ctypes scalars using their declared size (GH-159767) #159899
- [3.15] gh-159739: Initialize template iterator references before allocating (GH-159773) #159900
- [3.14] gh-159739: Initialize template iterator references before allocating (GH-159773) #159901
- [3.15] gh-159739: Handle overlapping buffers in BytesIO.readinto (GH-159777) #159902
- [3.14] gh-159739: Handle overlapping buffers in BytesIO.readinto (GH-159777) #159903
- [3.15] gh-159739: Track group records for cyclic garbage collection (GH-159778) #159904
- [3.14] gh-159739: Track group records for cyclic garbage collection (GH-159778) #159905
- [3.15] gh-159739: Reject the minimum dynamic formatting width (GH-159780) #159906
- [3.15] gh-159739: Avoid leaking references during free-threaded GC enumeration (GH-159781) #159907
- [3.14] gh-159739: Avoid leaking references during free-threaded GC enumeration (GH-159781) #159908
- [3.15] gh-159739: [typing] Handle generic alias construction errors (GH-159772) #159909
- [3.15] gh-159739: Bound encoding-name lookahead in surrogatepass (GH-159785) #159911
- [3.14] gh-159739: Bound encoding-name lookahead in surrogatepass (GH-159785) #159912
- [3.15] gh-159739: Handle OrderedDict item iterator allocation failures (GH-159774) #159915
- [3.14] gh-159739: [typing] Handle generic alias construction errors (GH-159772) #159929
- [3.14] gh-159739: Handle OrderedDict item iterator allocation failures (GH-159774) #159930
- [3.14] gh-159739: Reject the minimum dynamic formatting width (GH-159780) #159931
- [3.14] gh-159739: Propagate macOS proxy conversion errors (GH-159750) #159932
- [3.14] gh-159739: Preserve the normalization buffer on allocation failure (GH-159755) #159933
- [3.15] gh-159739: Propagate macOS proxy conversion errors (GH-159750) #159934
- [3.15] gh-159739: Preserve the normalization buffer on allocation failure (GH-159755) #159935
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
extension-modulesC modules in the Modules dirC modules in the Modules dirinterpreter-core(Objects, Python, Grammar, and Parser dirs)(Objects, Python, Grammar, and Parser dirs)type-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or error
Activity
pythongh-159739: Release tuple items if resizing fails
pythongh-159739: Add a regression test for the _PyTuple_Resize() leak
pythongh-159739: Fix crash in _PyTuple_Resize() with an invalid size
gh-159739: Release SSL resources on error paths (GH-159745)
gh-159739: Release tuple items if resizing fails (GH-159754)
18 remaining items
gh-159739: Handle interpreter configuration encoding errors (#159747)
gh-159739: Preserve the syntax error if metadata allocation fails (#1…
gh-159739: Propagate macOS proxy conversion errors (#159750)
[3.14] gh-159739: Check character formatting allocation failure (GH-1…
gh-159739: Preserve the full maxlen when copying deque subclasses (#1…
gh-159739: Read resized ctypes scalars using their declared size (#15…
gh-159739: Initialize template iterator references before allocating (#…
gh-159739: Handle overlapping buffers in BytesIO.readinto (#159777)
gh-159739: Track group records for cyclic garbage collection (#159778)
gh-159739: Reject the minimum dynamic formatting width (#159780)
gh-159739: Avoid leaking references during free-threaded GC enumerati…
gh-159739: [typing] Handle generic alias construction errors (#159772)
gh-159739: Bound encoding-name lookahead in surrogatepass (#159785)
gh-159739: Handle OrderedDict item iterator allocation failures (#159774
gh-159739: Preserve the normalization buffer on allocation failure (#…