mirrors
/
cpython
mirror of https://github.com/python/cpython.git
2
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
cpython/Objects
History
Serhiy Storchaka 8d35fd1b34
[3.9] gh-133767: Fix use-after-free in the unicode-escape decoder with an error handler (GH-129648) (GH-133944) (#134346) 
* [3.9] gh-133767: Fix use-after-free in the unicode-escape decoder with an error handler (GH-129648) (GH-133944)

If the error handler is used, a new bytes object is created to set as
the object attribute of UnicodeDecodeError, and that bytes object then
replaces the original data. A pointer to the decoded data will became invalid
after destroying that temporary bytes object. So we need other way to return
the first invalid escape from _PyUnicode_DecodeUnicodeEscapeInternal().

_PyBytes_DecodeEscape() does not have such issue, because it does not
use the error handlers registry, but it should be changed for compatibility
with _PyUnicode_DecodeUnicodeEscapeInternal().
(cherry picked from commit 9f69a58623)
(cherry picked from commit 6279eb8c07)
(cherry picked from commit a75953b347)
(cherry picked from commit 0c33e5baed)
(cherry picked from commit 8b528cacbb)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
 		2025-06-02 17:58:01 +02:00
..
clinic bpo-46852: Rename float.__set_format__() to float.__setformat__() (GH-31558) (GH-31581) 2022-02-25 16:13:34 +01:00
stringlib [3.9] Remove effbot urls (GH-26308). (#92162) 2022-05-02 12:22:05 -06:00
README Issue #18093: Factor out the programs that embed the runtime 2014-07-25 21:52:14 +10:00
abstract.c bpo-30570: Use Py_EnterRecursiveCall() in issubclass() (GH-29048) (GH-29178) 2021-11-04 21:20:21 +01:00
accu.c bpo-35081: Move accu.h to Include/internal/pycore_accu.h (GH-10271) 2018-11-01 02:30:36 +01:00
boolobject.c bpo-36974: tp_print -> tp_vectorcall_offset and tp_reserved -> tp_as_async (GH-13464) 2019-05-30 19:13:39 -07:00
bytearrayobject.c bpo-42924: Fix incorrect copy in bytearray_repeat (GH-24208) (#24211) 2021-04-26 21:39:51 +02:00
bytes_methods.c bpo-40170: Add _PyIndex_Check() internal function (GH-19426) 2020-04-08 02:01:56 +02:00
bytesobject.c [3.9] gh-133767: Fix use-after-free in the unicode-escape decoder with an error handler (GH-129648) (GH-133944) (#134346) 2025-06-02 17:58:01 +02:00
call.c [3.9] bpo-40052: Fix alignment issue in PyVectorcall_Function() (GH-23999) (GH-24005) 2021-01-05 16:46:58 +01:00
capsule.c bpo-40170: PyObject_NEW() becomes an alias to PyObject_New() (GH-19379) 2020-04-08 00:38:15 +02:00
cellobject.c bpo-40268: Remove unused pycore_pymem.h includes (GH-19531) 2020-04-15 02:57:50 +02:00
classobject.c bpo-44657: Fix instancemethod_call to use PyInstanceMethod_GET_FUNCTION (GH-27202) 2021-07-28 06:33:03 -07:00
codeobject.c [3.9] bpo-43499: Restrict co_code to be under INT_MAX in codeobject (GH-20628) (GH-24896) 2021-03-17 20:26:38 +02:00
complexobject.c bpo-44698: Restore complex pow behaviour for small integral exponents (GH-27772) (GH-27797) 2021-08-17 18:38:39 +01:00
descrobject.c bpo-43721: Fix docstrings for property.getter/setter/deleter (GH-31046) 2022-03-14 16:55:12 -07:00
dict-common.h bpo-33312: Fix clang ubsan out of bounds warnings in dict. (GH-6537) 2018-04-19 22:41:19 -07:00
dictnotes.txt Issue #15055: update dictnotes.txt. Patch by Mark Shannon. 2012-06-24 21:03:45 +02:00
dictobject.c bpo-44114: Fix dictkeys_reversed and dictvalues_reversed function signatures (GH-26062) (GH-26093) 2021-05-16 17:34:43 +03:00
enumobject.c bpo-42536: GC track recycled tuples (GH-23623) (GH-23651) 2020-12-07 20:07:48 +00:00
exceptions.c bpo-46775: OSError should call winerror_to_errno unconditionally on Windows (GH-32179) 2022-03-30 18:49:40 -07:00
fileobject.c bpo-40268: Remove a few pycore_pystate.h includes (GH-19510) 2020-04-14 17:52:15 +02:00
floatobject.c bpo-46852: Rename float.__set_format__() to float.__setformat__() (GH-31558) (GH-31581) 2022-02-25 16:13:34 +01:00
frameobject.c [3.9] gh-92311: Let frame_setlineno jump over listcomps (#92740) 2022-05-12 17:41:34 -04:00
funcobject.c bpo-42143: Ensure PyFunction_NewWithQualName() can't fail after creating the func object (GH-22953) (GH-23021) 2020-10-29 13:02:50 +02:00
genericaliasobject.c [3.9] gh-91118: Fix docstrings that do not honor --without-doc-strings (GH-31769) (#91664) 2022-04-19 12:58:34 -07:00
genobject.c bpo-14911: Corrected generator.throw() documentation (GH-32207) 2022-03-31 07:24:39 -07:00
interpreteridobject.c bpo-40302: Replace PY_INT64_T with int64_t (GH-19573) 2020-04-17 19:13:06 +02:00
iterobject.c bpo-40268: Remove unused pycore_pymem.h includes (GH-19531) 2020-04-15 02:57:50 +02:00
listobject.c [3.9] gh-97616: list_resize() checks for integer overflow (GH-97617) (GH-97627) 2022-10-04 10:01:10 -07:00
listsort.txt [3.9] Fix typos in the Objects directory (GH-28766) (GH-28795) 2021-10-07 07:09:41 -07:00
lnotab_notes.txt bpo-38115: Deal with invalid bytecode offsets in lnotab (GH-16079) 2019-09-28 07:49:15 -07:00
longobject.c [3.9] gh-95778: Mention sys.set_int_max_str_digits() in error message (#96874) (#96877) 2022-10-04 10:05:45 -07:00
memoryobject.c bpo-40268: Remove unused pycore_pymem.h includes (GH-19531) 2020-04-15 02:57:50 +02:00
methodobject.c bpo-33930: Fix segfault with deep recursion when cleaning method objects (GH-27678) (GH-27720) 2021-08-11 10:32:24 +02:00
moduleobject.c bpo-40268: Remove unused structmember.h includes (GH-19530) 2020-04-15 02:35:41 +02:00
namespaceobject.c bpo-39075: types.SimpleNamespace no longer sorts attributes in its repr (GH-19430) 2020-05-15 18:27:54 -07:00
object.c bpo-38787: C API for module state access from extension methods (PEP 573) (GH-19936) 2020-05-07 15:39:59 +02:00
obmalloc.c [3.9] Fix typos in the Objects directory (GH-28766) (GH-28795) 2021-10-07 07:09:41 -07:00
odictobject.c bpo-46085: Fix iterator cache mechanism of OrderedDict. (GH-30290) 2021-12-29 21:29:19 -08:00
picklebufobject.c [3.9] gh-91118: Fix docstrings that do not honor --without-doc-strings (GH-31769) (#91664) 2022-04-19 12:58:34 -07:00
rangeobject.c bpo-45030: Fix integer overflow in __reduce__ of the range iterator (GH-28000) 2021-09-04 13:39:47 -07:00
setobject.c bpo-46615: Don't crash when set operations mutate the sets (GH-31120) (GH-31312) 2022-02-13 12:29:42 +02:00
sliceobject.c bpo-40268: Remove unused pycore_pymem.h includes (GH-19531) 2020-04-15 02:57:50 +02:00
structseq.c [3.9] bpo-42083: Allow NULL doc in PyStructSequence_NewType (#25896) 2021-05-04 16:07:13 +02:00
tupleobject.c [3.9] bpo-40514: Remove --with-experimental-isolated-subinterpreters in 3.9 (GH-20228) 2020-05-20 00:27:46 +02:00
typeobject.c [3.9] gh-92112: Fix crash triggered by an evil custom `mro()` (GH-92113) (GH-92372) 2022-05-16 18:47:35 +02:00
typeslots.inc bpo-40724: Support setting buffer slots from type specs (GH-20648) (GH-20683) 2020-06-07 09:06:40 +02:00
typeslots.py Issue #26662: Set PYTHON_FOR_GEN in configure 2016-07-26 12:48:08 +02:00
unicodectype.c Removed unintentional trailing spaces in non-external and non-generated C files. 2015-03-18 21:53:15 +02:00
unicodeobject.c [3.9] gh-133767: Fix use-after-free in the unicode-escape decoder with an error handler (GH-129648) (GH-133944) (#134346) 2025-06-02 17:58:01 +02:00
unicodetype_db.h closes bpo-39926: Update Unicode to 13.0.0. (GH-18910) 2020-03-10 20:41:34 -07:00
weakrefobject.c bpo-44720: Don't crash when calling weakref.proxy(not_an_iterator).__next__ (GH-27316) (#27325) 2021-07-24 11:45:40 +02:00

README 

Source files for various builtin objects