cpython

cpython copied to clipboard

Use-after-free in `OrderedDict.copy` via re-entrant `__get_item__`

1

### What happened? `OrderedDict.copy()` iterates its nodes and calls `__getitem__` to fetch values. A re-entrant `__getitem__` that calls `clear()` during iteration frees all `_ODictNode` structures while `_odict_FOREACH` continues accessing them,...

jackfromeast

* Issue: gh-142752

kumaraditya303

Followup issue for https://github.com/python/cpython/issues/142651 to ensure other APIs are thread safe if they should be ### Linked PRs * gh-142791

kumaraditya303

Use-after-free in `zoneinfo.get_weak_cache` via weak DECREF assumption

1

### What happened? `get_weak_cache()` assumes that `_weak_cache` is always owned by the object and safe to DECREF. When _weak_cache is a descriptor returning a new object, this assumption breaks, causing...

jackfromeast

gh-142750: Normalize ParamSpec __bound__ when bound is None

3

When creating a ParamSpec with bound=None, the runtime __bound__ attribute is set to instead of None. This change mirrors TypeVar.__new__ by explicitly converting Py_None to NULL before type checking, ensuring...

hyongtao-code

gh-143309: fix `test_execve_env_concurrent_mutation_with_fspath_posix` buildbot failure

2

It doesn't matter whether I spawn Python itself or another utility. I'm not sure if the issue with builbots is the fact that Python is installed as a shared library...

picnixz

### What happened? In `parse_envlist` the borrowed entries from `PyMapping_Keys` and `PyMapping_Values` are processed by `PyUnicode_FSConverter`, which triggers user `__fspath__` on `PathEntry` objects. The crafted `AliasEnv` drops each entry during...

jackfromeast

JIT: Implement `unique reference tracking` in Tier 2 for reference count optimizations

7

# Feature or enhancement ### Proposal: ## Motivation We should implement `unique reference tracking` in Tier 2 to facilitate optimizations that reduce reference counting overhead. For example, when a tuple...

cocolato

gh-139757: Add BINARY_OP_SUBSCR_USTR_INT

2

Since https://github.com/python/cpython/pull/140800 `BINARY_OP_SUBSCR_STR_INT` only specializes for compact ASCII strings. Let's introduce `BINARY_OP_SUBSCR_USTR_INT` to specialize again for reading an ASCII character from any string. * Issue: gh-139757

chris-eibl

gh-142461: Move misplaced NEWS entries to an appropriate section

1

This includes changes in 3.12 and 3.13 * Issue: gh-142461

Aniketsy