summaryrefslogtreecommitdiffstats
path: root/Misc
diff options
context:
space:
mode:
authorYonatan Goldschmidt <yon.goldschmidt@gmail.com>2020-02-22 13:11:48 (GMT)
committerGitHub <noreply@github.com>2020-02-22 13:11:48 (GMT)
commit1c56f8ffad44478b4214a2bf8eb7cf51c28a347a (patch)
treec2303c03737343e14f7720a97200bb007845ac7b /Misc
parenta025d4ca99fb4c652465368e0b4eb03cf4b316b9 (diff)
downloadcpython-1c56f8ffad44478b4214a2bf8eb7cf51c28a347a.zip
cpython-1c56f8ffad44478b4214a2bf8eb7cf51c28a347a.tar.gz
cpython-1c56f8ffad44478b4214a2bf8eb7cf51c28a347a.tar.bz2
bpo-39382: Avoid dangling object use in abstract_issubclass() (GH-18530)
Hold reference of __bases__ tuple until tuple item is done with, because by dropping the reference the item may be destroyed.
Diffstat (limited to 'Misc')
-rw-r--r--Misc/ACKS1
-rw-r--r--Misc/NEWS.d/next/Core and Builtins/2020-02-18-01-40-13.bpo-39382.OLSJu9.rst3
2 files changed, 4 insertions, 0 deletions
diff --git a/Misc/ACKS b/Misc/ACKS
index f329a2d..fe24a56 100644
--- a/Misc/ACKS
+++ b/Misc/ACKS
@@ -594,6 +594,7 @@ Karan Goel
Jeroen Van Goey
Christoph Gohlke
Tim Golden
+Yonatan Goldschmidt
Mark Gollahon
Guilherme Gonçalves
Tiago Gonçalves
diff --git a/Misc/NEWS.d/next/Core and Builtins/2020-02-18-01-40-13.bpo-39382.OLSJu9.rst b/Misc/NEWS.d/next/Core and Builtins/2020-02-18-01-40-13.bpo-39382.OLSJu9.rst
new file mode 100644
index 0000000..605f4c8
--- /dev/null
+++ b/Misc/NEWS.d/next/Core and Builtins/2020-02-18-01-40-13.bpo-39382.OLSJu9.rst
@@ -0,0 +1,3 @@
+Fix a use-after-free in the single inheritance path of ``issubclass()``, when
+the ``__bases__`` of an object has a single reference, and so does its first item.
+Patch by Yonatan Goldschmidt.