diff options
author | Yonatan Goldschmidt <yon.goldschmidt@gmail.com> | 2020-02-22 13:11:48 (GMT) |
---|---|---|
committer | GitHub <noreply@github.com> | 2020-02-22 13:11:48 (GMT) |
commit | 1c56f8ffad44478b4214a2bf8eb7cf51c28a347a (patch) | |
tree | c2303c03737343e14f7720a97200bb007845ac7b /Misc | |
parent | a025d4ca99fb4c652465368e0b4eb03cf4b316b9 (diff) | |
download | cpython-1c56f8ffad44478b4214a2bf8eb7cf51c28a347a.zip cpython-1c56f8ffad44478b4214a2bf8eb7cf51c28a347a.tar.gz cpython-1c56f8ffad44478b4214a2bf8eb7cf51c28a347a.tar.bz2 |
bpo-39382: Avoid dangling object use in abstract_issubclass() (GH-18530)
Hold reference of __bases__ tuple until tuple item is done with, because by
dropping the reference the item may be destroyed.
Diffstat (limited to 'Misc')
-rw-r--r-- | Misc/ACKS | 1 | ||||
-rw-r--r-- | Misc/NEWS.d/next/Core and Builtins/2020-02-18-01-40-13.bpo-39382.OLSJu9.rst | 3 |
2 files changed, 4 insertions, 0 deletions
@@ -594,6 +594,7 @@ Karan Goel Jeroen Van Goey Christoph Gohlke Tim Golden +Yonatan Goldschmidt Mark Gollahon Guilherme Gonçalves Tiago Gonçalves diff --git a/Misc/NEWS.d/next/Core and Builtins/2020-02-18-01-40-13.bpo-39382.OLSJu9.rst b/Misc/NEWS.d/next/Core and Builtins/2020-02-18-01-40-13.bpo-39382.OLSJu9.rst new file mode 100644 index 0000000..605f4c8 --- /dev/null +++ b/Misc/NEWS.d/next/Core and Builtins/2020-02-18-01-40-13.bpo-39382.OLSJu9.rst @@ -0,0 +1,3 @@ +Fix a use-after-free in the single inheritance path of ``issubclass()``, when +the ``__bases__`` of an object has a single reference, and so does its first item. +Patch by Yonatan Goldschmidt. |