diff options
| author | Antoine Pitrou <solipsis@pitrou.net> | 2012-11-01 19:03:30 (GMT) |
|---|---|---|
| committer | Antoine Pitrou <solipsis@pitrou.net> | 2012-11-01 19:03:30 (GMT) |
| commit | 53d36b691241f278fa6173034e6edb10154e62d3 (patch) | |
| tree | 4dc522e53a8ab1f0c6f1cf24b0aeea5e9c0528b9 | |
| parent | 1511a5a3af26c99d73ae2933c74aed25ad1e8722 (diff) | |
| parent | 5ebe65f8cb541b10f07fb6ce2b4283a26c7e1d80 (diff) | |
| download | cpython-53d36b691241f278fa6173034e6edb10154e62d3.zip cpython-53d36b691241f278fa6173034e6edb10154e62d3.tar.gz cpython-53d36b691241f278fa6173034e6edb10154e62d3.tar.bz2 | |
Issue #16228: Fix a crash in the json module where a list changes size while it is being encoded.
Patch by Serhiy Storchaka.
| -rw-r--r-- | Lib/test/json_tests/test_dump.py | 8 | ||||
| -rw-r--r-- | Misc/NEWS | 3 | ||||
| -rw-r--r-- | Modules/_json.c | 10 |
3 files changed, 14 insertions, 7 deletions
diff --git a/Lib/test/json_tests/test_dump.py b/Lib/test/json_tests/test_dump.py index 4b3386f..237ee35 100644 --- a/Lib/test/json_tests/test_dump.py +++ b/Lib/test/json_tests/test_dump.py @@ -20,6 +20,14 @@ class TestDump: {2: 3.0, 4.0: 5, False: 1, 6: True}, sort_keys=True), '{"false": 1, "2": 3.0, "4.0": 5, "6": true}') + # Issue 16228: Crash on encoding resized list + def test_encode_mutated(self): + a = [object()] * 10 + def crasher(obj): + del a[-1] + self.assertEqual(self.dumps(a, default=crasher), + '[null, null, null, null, null]') + class TestPyDump(TestDump, PyTest): pass @@ -85,6 +85,9 @@ Core and Builtins Library ------- +- Issue #16228: Fix a crash in the json module where a list changes size + while it is being encoded. Patch by Serhiy Storchaka. + - Issue #16351: New function gc.get_stats() returns per-generation collection statistics. diff --git a/Modules/_json.c b/Modules/_json.c index 2538b05..dbe3bad 100644 --- a/Modules/_json.c +++ b/Modules/_json.c @@ -1659,8 +1659,6 @@ encoder_listencode_list(PyEncoderObject *s, _PyAccu *acc, static PyObject *empty_array = NULL; PyObject *ident = NULL; PyObject *s_fast = NULL; - Py_ssize_t num_items; - PyObject **seq_items; Py_ssize_t i; if (open_array == NULL || close_array == NULL || empty_array == NULL) { @@ -1674,8 +1672,7 @@ encoder_listencode_list(PyEncoderObject *s, _PyAccu *acc, s_fast = PySequence_Fast(seq, "_iterencode_list needs a sequence"); if (s_fast == NULL) return -1; - num_items = PySequence_Fast_GET_SIZE(s_fast); - if (num_items == 0) { + if (PySequence_Fast_GET_SIZE(s_fast) == 0) { Py_DECREF(s_fast); return _PyAccu_Accumulate(acc, empty_array); } @@ -1696,7 +1693,6 @@ encoder_listencode_list(PyEncoderObject *s, _PyAccu *acc, } } - seq_items = PySequence_Fast_ITEMS(s_fast); if (_PyAccu_Accumulate(acc, open_array)) goto bail; if (s->indent != Py_None) { @@ -1708,8 +1704,8 @@ encoder_listencode_list(PyEncoderObject *s, _PyAccu *acc, buf += newline_indent */ } - for (i = 0; i < num_items; i++) { - PyObject *obj = seq_items[i]; + for (i = 0; i < PySequence_Fast_GET_SIZE(s_fast); i++) { + PyObject *obj = PySequence_Fast_GET_ITEM(s_fast, i); if (i) { if (_PyAccu_Accumulate(acc, s->item_separator)) goto bail; |