Repository navigation
Fix minor safety issues #159739
Description
Bug report
I had a model look for security issues and it found a lot of things that are probably not exploitable but real edge-case C bugs. I'll open PRs for these (after manual review) and merge the fixes.
CPython versions tested on:
CPython main branch
Operating systems tested on:
macOS
Linked PRs
- gh-159739: Release SSL resources on error paths #159745
- gh-159739: Check character formatting allocation failure #159746
- gh-159739: Handle interpreter configuration encoding errors #159747
- gh-159739: Handle module filename encoding errors #159749
- gh-159739: Propagate macOS proxy conversion errors #159750
- gh-159739: Preserve the syntax error if metadata allocation fails #159751
- gh-159739: Release resources on interpreter startup error paths #159752
- gh-159739: Release tuple items if resizing fails #159754
- gh-159739: Preserve the normalization buffer on allocation failure #159755
- gh-159739: Fix reference and error handling in warnings #159758
- [3.15] gh-159739: Release SSL resources on error paths (GH-159745) #159761
- [3.14] gh-159739: Release SSL resources on error paths (GH-159745) #159762
- gh-159739: Preserve the full maxlen when copying deque subclasses #159765
- gh-159739: Read resized ctypes scalars using their declared size #159767
- gh-159739: Skip code-extra cleanup callbacks for NULL data #159768
- gh-159739: Release replaced PyInitConfig strings #159769
- gh-159739: [typing] Handle generic alias construction errors #159772
- gh-159739: Initialize template iterator references before allocating #159773
- gh-159739: Handle OrderedDict item iterator allocation failures #159774
- gh-159739: Handle overlapping buffers in BytesIO.readinto #159777
- gh-159739: Track group records for cyclic garbage collection #159778
- gh-159739: Reject the minimum dynamic formatting width #159780
- gh-159739: Avoid leaking references during free-threaded GC enumeration #159781
- gh-159739: Bound encoding-name lookahead in surrogatepass #159785
- [3.15] gh-159739: Release tuple items if resizing fails (GH-159754) #159787
- [3.14] gh-159739: Release tuple items if resizing fails (GH-159754) #159788
- [3.15] gh-159739: Release resources on interpreter startup error paths (GH-159752) #159793
- [3.14] gh-159739: Release resources on interpreter startup error paths (GH-159752) #159794
- gh-159739: Fix crash in _PyTuple_Resize() with an invalid size #159804
- [3.15] gh-159739: Release replaced PyInitConfig strings (GH-159769) #159809
- [3.14] gh-159739: Release replaced PyInitConfig strings (GH-159769) #159810
- [3.15] gh-159739: Check character formatting allocation failure (GH-159746) #159839
- [3.14] gh-159739: Check character formatting allocation failure (GH-159746) #159840
- [3.15] gh-159739: Handle module filename encoding errors (GH-159749) #159841
- [3.14] gh-159739: Handle module filename encoding errors (GH-159749) #159842
- [3.15] gh-159739: Handle interpreter configuration encoding errors (GH-159747) #159843
- [3.14] gh-159739: Handle interpreter configuration encoding errors (GH-159747) #159844
- [3.15] gh-159739: Preserve the syntax error if metadata allocation fails (GH-159751) #159845
- [3.14] gh-159739: Preserve the syntax error if metadata allocation fails (GH-159751) #159846
- [3.15] gh-159739: Preserve the full maxlen when copying deque subclasses (GH-159765) #159896
- [3.14] gh-159739: Preserve the full maxlen when copying deque subclasses (GH-159765) #159897
- [3.15] gh-159739: Read resized ctypes scalars using their declared size (GH-159767) #159898
- [3.14] gh-159739: Read resized ctypes scalars using their declared size (GH-159767) #159899
- [3.15] gh-159739: Initialize template iterator references before allocating (GH-159773) #159900
- [3.14] gh-159739: Initialize template iterator references before allocating (GH-159773) #159901
- [3.15] gh-159739: Handle overlapping buffers in BytesIO.readinto (GH-159777) #159902
- [3.14] gh-159739: Handle overlapping buffers in BytesIO.readinto (GH-159777) #159903
- [3.15] gh-159739: Track group records for cyclic garbage collection (GH-159778) #159904
- [3.14] gh-159739: Track group records for cyclic garbage collection (GH-159778) #159905
- [3.15] gh-159739: Reject the minimum dynamic formatting width (GH-159780) #159906
- [3.15] gh-159739: Avoid leaking references during free-threaded GC enumeration (GH-159781) #159907
- [3.14] gh-159739: Avoid leaking references during free-threaded GC enumeration (GH-159781) #159908
- [3.15] gh-159739: [typing] Handle generic alias construction errors (GH-159772) #159909
- [3.15] gh-159739: Bound encoding-name lookahead in surrogatepass (GH-159785) #159911
- [3.14] gh-159739: Bound encoding-name lookahead in surrogatepass (GH-159785) #159912
- [3.15] gh-159739: Handle OrderedDict item iterator allocation failures (GH-159774) #159915
- [3.14] gh-159739: [typing] Handle generic alias construction errors (GH-159772) #159929
- [3.14] gh-159739: Handle OrderedDict item iterator allocation failures (GH-159774) #159930
- [3.14] gh-159739: Reject the minimum dynamic formatting width (GH-159780) #159931
- [3.14] gh-159739: Propagate macOS proxy conversion errors (GH-159750) #159932
- [3.14] gh-159739: Preserve the normalization buffer on allocation failure (GH-159755) #159933
- [3.15] gh-159739: Propagate macOS proxy conversion errors (GH-159750) #159934
- [3.15] gh-159739: Preserve the normalization buffer on allocation failure (GH-159755) #159935
- gh-159739: Release weak proxy operands on errors #159968
- gh-159739: Respect readline limits after a short read #159974
- gh-159739: Collect grapheme iterator and segment type cycles #159975
- [3.15] gh-159739: Fix crash in _PyTuple_Resize() with an invalid size (GH-159804) #159976
- [3.14] gh-159739: Fix crash in _PyTuple_Resize() with an invalid size (GH-159804) #159977
- gh-159739: Break reference cycles involving property objects #159978
- gh-159739: Clear free-threaded GC worklists after early errors #159979
- gh-159739: Do not intern complex subclasses in code constants #159980
- gh-159739: Keep generic alias arguments alive while formatting errors #159981
- gh-159739: Avoid destroying a remote unwinder cache twice #159982
- gh-159739: Propagate fallback getaddrinfo allocation failures #159984
- gh-159739: Handle overlapping buffers in struct.pack_into #159985
- gh-159739: Preserve non-BMP characters in multibyte encoders #159987
- gh-159739: Avoid quadratic grouped-address parsing #159990
- gh-159739: Account for NUL terminators in fallback getnameinfo #159991
- [3.15] gh-159739: Collect grapheme iterator and segment type cycles (GH-159975) #160013
- [3.15] gh-159739: Break reference cycles involving property objects (GH-159978) #160014
- [3.14] gh-159739: Break reference cycles involving property objects (GH-159978) #160015
- [3.15] gh-159739: Clear free-threaded GC worklists after early errors (GH-159979) #160016
- [3.14] gh-159739: Clear free-threaded GC worklists after early errors (GH-159979) #160017
- [3.15] gh-159739: Release weak proxy operands on errors (GH-159968) #160018
- [3.14] gh-159739: Release weak proxy operands on errors (GH-159968) #160019
- [3.15] gh-159739: Keep generic alias arguments alive while formatting errors (GH-159981) #160020
- [3.14] gh-159739: Keep generic alias arguments alive while formatting errors (GH-159981) #160021
- [3.15] gh-159739: Fix reference and error handling in warnings (GH-159758) #160022
- [3.15] gh-159739: Avoid destroying a remote unwinder cache twice (GH-159982) #160023
- [3.14] gh-159739: Avoid destroying a remote unwinder cache twice (GH-159982) #160084
- [3.14] gh-159739: Fix reference and error handling in warnings (GH-159758) #160085
- [3.15] gh-159739: Account for NUL terminators in fallback getnameinfo (GH-159991) #160091
- [3.14] gh-159739: Account for NUL terminators in fallback getnameinfo (GH-159991) #160092
- [3.15] gh-159739: Preserve non-BMP characters in multibyte encoders (GH-159987) #160094
- [3.14] gh-159739: Preserve non-BMP characters in multibyte encoders (GH-159987) #160095
- [3.15] gh-159739: Propagate fallback getaddrinfo allocation failures (GH-159984) #160099
- [3.14] gh-159739: Propagate fallback getaddrinfo allocation failures (GH-159984) #160100
- [3.15] gh-159739: Handle overlapping buffers in struct.pack_into (GH-159985) #160101
- gh-159739: Skip context watchers cleared during notification #160164
- gh-159739: Keep SimpleQueue valid after buffer allocation fails #160165
- gh-159739: Allocate thread-local state before constructing the object #160166
- gh-159739: Release replaced type alias values #160167
- gh-159739: Hold the codec registry lock while unregistering #160168
- gh-159739: Fully clear the unpickler memo #160173
- gh-159739: Preserve ctypes base metadata when cloning fails #160174
- gh-159739: Preserve large years in time conversions #160175
- gh-159739: Handle overlapping mmap writes #160189
- gh-159739: Recheck BytesIO state after converting truncate size #160190
- gh-159739: Validate newline replacement in TextIOWrapper.write #160191
- gh-159739: Keep SQLite list parameters alive while binding #160192
- gh-159739: Keep descriptor metadata dictionaries alive during insertion #160193
- gh-159739: Detect recursive untyped ctypes arguments #160194
- gh-159739: Propagate float rounding allocation failures #160195
- gh-159739: Protect list storage while reporting its size #160196
- gh-159739: Preserve ContextVar cache updates from finalizers #160197
- gh-159739: Keep the instance type alive during ABC subclass checks #160198
- [3.15] gh-159739: Release replaced type alias values (GH-160167) #160242
- [3.14] gh-159739: Release replaced type alias values (GH-160167) #160243
- [3.15] gh-159739: Respect readline limits after a short read (GH-159974) #160246
- [3.15] gh-159739: Do not intern complex subclasses in code constants (GH-159980) #160249
- [3.14] gh-159739: Do not intern complex subclasses in code constants (GH-159980) #160250
- [3.14] gh-159739: Allocate thread-local state before constructing the object (GH-160166) #160285
- [3.15] gh-159739: Allocate thread-local state before constructing the object (GH-160166) #160286
- [3.14] gh-159739: Keep SimpleQueue valid after buffer allocation fails (GH-160165) #160287
- [3.15] gh-159739: Keep SimpleQueue valid after buffer allocation fails (GH-160165) #160288
- [3.14] gh-159739: Skip context watchers cleared during notification (GH-160164) #160289
- [3.15] gh-159739: Skip context watchers cleared during notification (GH-160164) #160291
- [3.15] gh-159739: Hold the codec registry lock while unregistering (GH-160168) #160292
- [3.15] gh-159739: Preserve ctypes base metadata when cloning fails (GH-160174) #160293
- [3.14] gh-159739: Preserve ctypes base metadata when cloning fails (GH-160174) #160294
- [3.15] gh-159739: Fully clear the unpickler memo (GH-160173) #160328
- [3.14] gh-159739: Preserve ContextVar cache updates from finalizers (GH-160197) #160329
- [3.15] gh-159739: Preserve ContextVar cache updates from finalizers (GH-160197) #160330
- [3.15] gh-159739: Detect recursive untyped ctypes arguments (GH-160194) #160350
- [3.14] gh-159739: Detect recursive untyped ctypes arguments (GH-160194) #160351
- [3.15] gh-159739: Keep SQLite list parameters alive while binding (GH-160192) #160361
- [3.14] gh-159739: Keep SQLite list parameters alive while binding (GH-160192) #160362
- [3.15] gh-159739: Protect list storage while reporting its size (GH-160196) #160363
- [3.14] gh-159739: Protect list storage while reporting its size (GH-160196) #160364
- [3.15] gh-159739: Keep descriptor metadata dictionaries alive during insertion (GH-160193) #160382
- [3.14] gh-159739: Keep descriptor metadata dictionaries alive during insertion (GH-160193) #160383
- [3.15] gh-159739: Recheck BytesIO state after converting truncate size (GH-160190) #160384
- [3.14] gh-159739: Recheck BytesIO state after converting truncate size (GH-160190) #160385
- gh-159739: Keep text I/O state valid across reentrant callbacks #160398
- gh-159739: Handle pyexpat configuration changes during callbacks #160399
- gh-159739: Preserve CJK codec state across chunk boundaries and callbacks #160400
- gh-159739: Keep sqlite3 cursor metadata and factories valid during queries #160403
- gh-159739: Guard cProfile against reentry while processing an external timer #160405
- [3.14] gh-159739: Handle pyexpat configuration changes during callbacks (GH-160399) #160474
- [3.15] gh-159739: Handle pyexpat configuration changes during callbacks (GH-160399) #160475
- [3.14] gh-159739: Respect readline limits after a short read (GH-159974) #160483
- [3.14] gh-159739: Handle overlapping buffers in struct.pack_into (GH-159985) #160484
- [3.14] gh-159739: Hold the codec registry lock while unregistering (GH-160168) #160485
- [3.14] gh-159739: Fully clear the unpickler memo (GH-160173) #160486
- [3.14] gh-159739: Validate newline replacement in TextIOWrapper.write (GH-160191) #160487
- [3.14] gh-159739: Keep the instance type alive during ABC subclass checks (GH-160198) #160488
- [3.15] gh-159739: Keep the instance type alive during ABC subclass checks (GH-160198) #160489
- [3.15] gh-159739: Guard cProfile against reentry while processing an external timer (GH-160405) #160566
- [3.14] gh-159739: Guard cProfile against reentry while processing an external timer (GH-160405) #160567
- [3.15] gh-159739: Keep text I/O state valid across reentrant callbacks (GH-160398) #160623
Activity
pythongh-159739: Add a regression test for the _PyTuple_Resize() leak
pythongh-159739: Fix crash in _PyTuple_Resize() with an invalid size
Merge branch 'main' into jelle/codex/pythongh-159739-warnings-errors
[3.14] gh-159739: Release SSL resources on error paths (GH-159745) (#…
gh-159739: Release resources on interpreter startup error paths (GH-1…
[3.15] gh-159739: Release SSL resources on error paths (GH-159745) (#…
pythongh-159739: Fix crash in _PyTuple_Resize() with an invalid size
pythongh-159739: Fix crash in _PyTuple_Resize() with an invalid size
pythongh-159739: Add a regression test for the _PyTuple_Resize() leak
pythongh-159739: Fix crash in _PyTuple_Resize() with an invalid size
[3.14] gh-159739: Release tuple items if resizing fails (GH-159754) (#…
[3.15] gh-159739: Release tuple items if resizing fails (GH-159754) (#…
[3.15] gh-159739: Release resources on interpreter startup error paths (
gh-159739: Release replaced PyInitConfig strings (GH-159769)
[3.15] gh-159739: Release replaced PyInitConfig strings (GH-159769) (#…
[3.14] gh-159739: Release replaced PyInitConfig strings (GH-159769) (#…
gh-159739: Check character formatting allocation failure (#159746)
gh-159739: Handle module filename encoding errors (#159749)
gh-159739: Handle interpreter configuration encoding errors (#159747)
gh-159739: Preserve the syntax error if metadata allocation fails (#1…
gh-159739: Propagate macOS proxy conversion errors (#159750)
[3.14] gh-159739: Check character formatting allocation failure (GH-1…
gh-159739: Preserve the full maxlen when copying deque subclasses (#1…
gh-159739: Read resized ctypes scalars using their declared size (#15…
gh-159739: Initialize template iterator references before allocating (#…
gh-159739: Handle overlapping buffers in BytesIO.readinto (#159777)
gh-159739: Track group records for cyclic garbage collection (#159778)
gh-159739: Reject the minimum dynamic formatting width (#159780)
gh-159739: Avoid leaking references during free-threaded GC enumerati…
gh-159739: [typing] Handle generic alias construction errors (#159772)
gh-159739: Bound encoding-name lookahead in surrogatepass (#159785)
gh-159739: Handle OrderedDict item iterator allocation failures (#159774
gh-159739: Preserve the normalization buffer on allocation failure (#…
[3.15] gh-159739: Check character formatting allocation failure (GH-1…
[3.15] gh-159739: Handle module filename encoding errors (GH-159749) (#…
[3.14] gh-159739: Handle module filename encoding errors (GH-159749) (#…
[3.15] gh-159739: Handle interpreter configuration encoding errors (G…
[3.14] gh-159739: Handle interpreter configuration encoding errors (G…
[3.15] gh-159739: Read resized ctypes scalars using their declared si…
[3.14] gh-159739: Read resized ctypes scalars using their declared si…
[3.14] gh-159739: Initialize template iterator references before allo…
[3.15] gh-159739: Handle overlapping buffers in BytesIO.readinto (GH-…
[3.14] gh-159739: Handle overlapping buffers in BytesIO.readinto (GH-…
[3.15] gh-159739: Track group records for cyclic garbage collection (G…
[3.14] gh-159739: Avoid leaking references during free-threaded GC en…
[3.15] gh-159739: Initialize template iterator references before allo…
[3.15] gh-159739: Preserve the syntax error if metadata allocation fa…
[3.15] gh-159739: Preserve the full maxlen when copying deque subclas…
[3.14] gh-159739: Preserve the full maxlen when copying deque subclas…
[3.15] gh-159739: Bound encoding-name lookahead in surrogatepass (GH-…
[3.14] gh-159739: Track group records for cyclic garbage collection (G…
[3.15] gh-159739: Handle OrderedDict item iterator allocation failures (
[3.15] gh-159739: Avoid leaking references during free-threaded GC en…
[3.14] gh-159739: Preserve the syntax error if metadata allocation fa…
[3.14] gh-159739: Bound encoding-name lookahead in surrogatepass (GH-…
[3.15] gh-159739: [typing] Handle generic alias construction errors (G…
[3.14] gh-159739: Handle OrderedDict item iterator allocation failures (
[3.14] gh-159739: [typing] Handle generic alias construction errors (G…
[3.14] gh-159739: Reject the minimum dynamic formatting width (GH-159780
[3.14] gh-159739: Preserve the normalization buffer on allocation fai…
[3.14] gh-159739: Release resources on interpreter startup error paths (
[3.15] gh-159739: Preserve the normalization buffer on allocation fai…
[3.14] gh-159739: Propagate macOS proxy conversion errors (GH-159750) (…
[3.15] gh-159739: Propagate macOS proxy conversion errors (GH-159750) (…
pythongh-159739: Remove the realloc failure test from test__tuple_resize
[3.15] gh-159739: Reject the minimum dynamic formatting width (GH-159780
gh-159739: Fix crash in _PyTuple_Resize() with an invalid size (GH-15…
[3.15] gh-159739: Fix crash in _PyTuple_Resize() with an invalid size (…
[3.14] gh-159739: Fix crash in _PyTuple_Resize() with an invalid size (…
gh-159739: Collect grapheme iterator and segment type cycles (#159975)
gh-159739: Break reference cycles involving property objects (#159978)
gh-159739: Clear free-threaded GC worklists after early errors (#159979)
gh-159739: Release weak proxy operands on errors (#159968)
gh-159739: Keep generic alias arguments alive while formatting errors (…
gh-159739: Fix reference and error handling in warnings (#159758)
gh-159739: Avoid destroying a remote unwinder cache twice (#159982)
pythongh-159739: Check complex constant immortality directly
gh-159739: Account for NUL terminators in fallback getnameinfo (#159991)
[3.15] gh-159739: Break reference cycles involving property objects (G…
[3.14] gh-159739: Break reference cycles involving property objects (G…
[3.14] gh-159739: Clear free-threaded GC worklists after early errors (…
[3.14] gh-159739: Release weak proxy operands on errors (GH-159968) (#…
[3.15] gh-159739: Keep generic alias arguments alive while formatting…
[3.15] gh-159739: Release weak proxy operands on errors (GH-159968) (#…
[3.15] gh-159739: Avoid destroying a remote unwinder cache twice (GH-…
gh-159739: Preserve non-BMP characters in multibyte encoders (#159987)
[3.14] gh-159739: Keep generic alias arguments alive while formatting…
[3.15] gh-159739: Fix reference and error handling in warnings (GH-15…
gh-159739: Propagate fallback getaddrinfo allocation failures (#159984)
gh-159739: Avoid quadratic grouped-address parsing (#159990)
gh-159739: Handle overlapping buffers in struct.pack_into (#159985)
[3.14] gh-159739: Avoid destroying a remote unwinder cache twice (GH-…
[3.15] gh-159739: Collect grapheme iterator and segment type cycles (G…
[3.15] gh-159739: Clear free-threaded GC worklists after early errors (…
[3.14] gh-159739: Fix reference and error handling in warnings (GH-15…
[3.14] gh-159739: Account for NUL terminators in fallback getnameinfo (…
[3.15] gh-159739: Account for NUL terminators in fallback getnameinfo (…
gh-159739: Release replaced type alias values (#160167)
gh-159739: Respect readline limits after a short read (#159974)
gh-159739: Do not intern complex subclasses in code constants (#159980)
[3.15] gh-159739: Propagate fallback getaddrinfo allocation failures (G…
[3.14] gh-159739: Propagate fallback getaddrinfo allocation failures (G…
[3.15] gh-159739: Release replaced type alias values (GH-160167) (#16…
[3.15] gh-159739: Preserve non-BMP characters in multibyte encoders (G…
[3.15] gh-159739: Handle overlapping buffers in struct.pack_into (GH-…
pythongh-159739: Use braces in float rounding error handling
pythongh-159739: Round-trip large years and validate datetime timestamps
[3.14] gh-159739: Preserve non-BMP characters in multibyte encoders (G…
gh-159739: Skip context watchers cleared during notification (#160164)
gh-159739: Keep SimpleQueue valid after buffer allocation fails (#160165
gh-159739: Allocate thread-local state before constructing the object (…
gh-159739: Preserve ctypes base metadata when cloning fails (#160174)
gh-159739: Hold the codec registry lock while unregistering (#160168)
pythongh-159739: Preserve overlapping mmap extended slice sources
pythongh-159739: Recheck text stream state after newline replacement
pythongh-159739: Use the bytearray size in the 3.15 readline backport
gh-159739: Fully clear the unpickler memo (#160173)
[3.15] gh-159739: Respect readline limits after a short read (GH-159974…
gh-159739: Propagate float rounding allocation failures (#160195)
gh-159739: Preserve ContextVar cache updates from finalizers (#160197)
gh-159739: Keep the instance type alive during ABC subclass checks (#…
gh-159739: Detect recursive untyped ctypes arguments (#160194)
pythongh-159739: Detect recursive untyped ctypes arguments (pythonGH-…
pythongh-159739: Detect recursive untyped ctypes arguments (pythonGH-…
gh-159739: Validate newline replacement in TextIOWrapper.write (#160191)
gh-159739: Keep SQLite list parameters alive while binding (#160192)
gh-159739: Protect list storage while reporting its size (#160196)
[3.15] gh-159739: Do not intern complex subclasses in code constants (G…
[3.14] gh-159739: Do not intern complex subclasses in code constants (G…
[3.14] gh-159739: Allocate thread-local state before constructing the…
[3.14] gh-159739: Keep SimpleQueue valid after buffer allocation fails (
[3.15] gh-159739: Allocate thread-local state before constructing the…
[3.15] gh-159739: Keep SimpleQueue valid after buffer allocation fails (
[3.15] gh-159739: Skip context watchers cleared during notification (G…
[3.14] gh-159739: Skip context watchers cleared during notification (G…
[3.15] gh-159739: Preserve ctypes base metadata when cloning fails (G…
[3.15] gh-159739: Fully clear the unpickler memo (GH-160173) (#160328)
[3.14] gh-159739: Preserve ctypes base metadata when cloning fails (G…
[3.14] gh-159739: Preserve ContextVar cache updates from finalizers (G…
[3.15] gh-159739: Preserve ContextVar cache updates from finalizers (G…
[3.14] gh-159739: Detect recursive untyped ctypes arguments (GH-160194)…
[3.15] gh-159739: Hold the codec registry lock while unregistering (G…
gh-159739: Keep descriptor metadata dictionaries alive during inserti…
pythongh-159739: Keep descriptor metadata dictionaries alive during i…
gh-159739: Recheck BytesIO state after converting truncate size (#160190
pythongh-159739: Keep descriptor metadata dictionaries alive during i…
pythongh-159739: Recheck BytesIO state after converting truncate size (…
pythongh-159739: Recheck BytesIO state after converting truncate size (…
[3.14] gh-159739: Protect list storage while reporting its size (GH-1…
[3.15] gh-159739: Keep SQLite list parameters alive while binding (GH…