[3.11] gh-120384: gh-120298: Fix array-out-of-bounds & use after free list
#121345
Conversation
pythonGH-120442) (python#120825) pythongh-120384: Fix array-out-of-bounds crash in `list_ass_subscript` (pythonGH-120442) (cherry picked from commit 8334a1b) Co-authored-by: Nikita Sobolev <mail@sobolevn.me>
This backports the fix to python#120298. commit id b884536
list_ass_subscriptlist
|
For consideration as a security related backport. To trigger these, people already need the ability to run arbitrary Python code. So we don't consider this a vulnerability given the existing capabilities. But it could make the life of some projects built on top of Python a little better. Such projects are already on undefined behavior grounds if they consider anything executing Python bytecode to not be able to escape that to begin with. Because CPython does not guarantee any such thing. |
|
🤖 New build scheduled with the buildbot fleet by @gpshead for commit de70708 🤖 Results will be shown at: https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F121345%2Fmerge If you want to schedule another build, you need to add the 🔨 test-with-buildbots label again. |
gh-120384: Fix array-out-of-bounds crash in
list_ass_subscript(GH-120442) (cherry picked from commit 8334a1b in the 3.12 branch)gh-120298: Fix use after free in
list_richcompare.