Fix minor safety issues #159739
Copy link
Copy link
Open
Labels
extension-modulesC modules in the Modules dirC modules in the Modules dirinterpreter-core(Objects, Python, Grammar, and Parser dirs)(Objects, Python, Grammar, and Parser dirs)type-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or error
Description
Bug report
I had a model look for security issues and it found a lot of things that are probably not exploitable but real edge-case C bugs. I'll open PRs for these (after manual review) and merge the fixes.
CPython versions tested on:
CPython main branch
Operating systems tested on:
macOS
Linked PRs
- gh-159739: Release SSL resources on error paths #159745
- gh-159739: Check character formatting allocation failure #159746
- gh-159739: Handle interpreter configuration encoding errors #159747
- gh-159739: Handle module filename encoding errors #159749
- gh-159739: Propagate macOS proxy conversion errors #159750
- gh-159739: Preserve the syntax error if metadata allocation fails #159751
- gh-159739: Release resources on interpreter startup error paths #159752
- gh-159739: Release tuple items if resizing fails #159754
- gh-159739: Preserve the normalization buffer on allocation failure #159755
- gh-159739: Fix reference and error handling in warnings #159758
- [3.15] gh-159739: Release SSL resources on error paths (GH-159745) #159761
- [3.14] gh-159739: Release SSL resources on error paths (GH-159745) #159762
- gh-159739: Preserve the full maxlen when copying deque subclasses #159765
- gh-159739: Read resized ctypes scalars using their declared size #159767
- gh-159739: Skip code-extra cleanup callbacks for NULL data #159768
- gh-159739: Release replaced PyInitConfig strings #159769
- gh-159739: [typing] Handle generic alias construction errors #159772
- gh-159739: Initialize template iterator references before allocating #159773
- gh-159739: Handle OrderedDict item iterator allocation failures #159774
- gh-159739: Handle overlapping buffers in BytesIO.readinto #159777
- gh-159739: Track group records for cyclic garbage collection #159778
- gh-159739: Reject the minimum dynamic formatting width #159780
- gh-159739: Avoid leaking references during free-threaded GC enumeration #159781
- gh-159739: Bound encoding-name lookahead in surrogatepass #159785
- [3.15] gh-159739: Release tuple items if resizing fails (GH-159754) #159787
- [3.14] gh-159739: Release tuple items if resizing fails (GH-159754) #159788
- [3.15] gh-159739: Release resources on interpreter startup error paths (GH-159752) #159793
- [3.14] gh-159739: Release resources on interpreter startup error paths (GH-159752) #159794
- gh-159739: Fix crash in _PyTuple_Resize() with an invalid size #159804
- [3.15] gh-159739: Release replaced PyInitConfig strings (GH-159769) #159809
- [3.14] gh-159739: Release replaced PyInitConfig strings (GH-159769) #159810
- [3.15] gh-159739: Check character formatting allocation failure (GH-159746) #159839
- [3.14] gh-159739: Check character formatting allocation failure (GH-159746) #159840
- [3.15] gh-159739: Handle module filename encoding errors (GH-159749) #159841
- [3.14] gh-159739: Handle module filename encoding errors (GH-159749) #159842
- [3.15] gh-159739: Handle interpreter configuration encoding errors (GH-159747) #159843
- [3.14] gh-159739: Handle interpreter configuration encoding errors (GH-159747) #159844
- [3.15] gh-159739: Preserve the syntax error if metadata allocation fails (GH-159751) #159845
- [3.14] gh-159739: Preserve the syntax error if metadata allocation fails (GH-159751) #159846
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
extension-modulesC modules in the Modules dirC modules in the Modules dirinterpreter-core(Objects, Python, Grammar, and Parser dirs)(Objects, Python, Grammar, and Parser dirs)type-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or error
Activity
pythongh-159739: Release tuple items if resizing fails
pythongh-159739: Add a regression test for the _PyTuple_Resize() leak
pythongh-159739: Fix crash in _PyTuple_Resize() with an invalid size
gh-159739: Release SSL resources on error paths (GH-159745)
gh-159739: Release tuple items if resizing fails (GH-159754)
6 remaining items
pythongh-159739: Fix crash in _PyTuple_Resize() with an invalid size
pythongh-159739: Fix crash in _PyTuple_Resize() with an invalid size
pythongh-159739: Add a regression test for the _PyTuple_Resize() leak
pythongh-159739: Fix crash in _PyTuple_Resize() with an invalid size
[3.14] gh-159739: Release tuple items if resizing fails (GH-159754) (#…
[3.15] gh-159739: Release tuple items if resizing fails (GH-159754) (#…
[3.15] gh-159739: Release resources on interpreter startup error paths (
gh-159739: Release replaced PyInitConfig strings (GH-159769)
[3.15] gh-159739: Release replaced PyInitConfig strings (GH-159769) (#…
[3.14] gh-159739: Release replaced PyInitConfig strings (GH-159769) (#…
gh-159739: Check character formatting allocation failure (#159746)
gh-159739: Handle module filename encoding errors (#159749)
gh-159739: Handle interpreter configuration encoding errors (#159747)
gh-159739: Preserve the syntax error if metadata allocation fails (#1…
gh-159739: Propagate macOS proxy conversion errors (#159750)