summaryrefslogtreecommitdiffstats
path: root/Python
diff options
context:
space:
mode:
authorGuido van Rossum <guido@python.org>2002-03-28 20:17:52 (GMT)
committerGuido van Rossum <guido@python.org>2002-03-28 20:17:52 (GMT)
commitcfbf1a33c17f5ea499a0419d94162d80c52ec782 (patch)
tree4e127ab1cec9efff500184cd4a533f38cf7d4af1 /Python
parent47cdf6fb6fbc501176329c560584441b2becc234 (diff)
downloadcpython-cfbf1a33c17f5ea499a0419d94162d80c52ec782.zip
cpython-cfbf1a33c17f5ea499a0419d94162d80c52ec782.tar.gz
cpython-cfbf1a33c17f5ea499a0419d94162d80c52ec782.tar.bz2
Fix an issue that was reported in but unrelated to the main problem of
SF bug 535905 (Evil Trashcan and GC interaction). The SETLOCAL() macro should not DECREF the local variable in-place and then store the new value; it should copy the old value to a temporary value, then store the new value, and then DECREF the temporary value. This is because it is possible that during the DECREF the frame is accessed by other code (e.g. a __del__ method or gc.collect()) and the variable would be pointing to already-freed memory. BUGFIX CANDIDATE!
Diffstat (limited to 'Python')
-rw-r--r--Python/ceval.c12
1 files changed, 10 insertions, 2 deletions
diff --git a/Python/ceval.c b/Python/ceval.c
index 97a734c..a93ceea 100644
--- a/Python/ceval.c
+++ b/Python/ceval.c
@@ -554,8 +554,16 @@ eval_frame(PyFrameObject *f)
/* Local variable macros */
#define GETLOCAL(i) (fastlocals[i])
-#define SETLOCAL(i, value) do { Py_XDECREF(GETLOCAL(i)); \
- GETLOCAL(i) = value; } while (0)
+
+/* The SETLOCAL() macro must not DECREF the local variable in-place and
+ then store the new value; it must copy the old value to a temporary
+ value, then store the new value, and then DECREF the temporary value.
+ This is because it is possible that during the DECREF the frame is
+ accessed by other code (e.g. a __del__ method or gc.collect()) and the
+ variable would be pointing to already-freed memory. */
+#define SETLOCAL(i, value) do { PyObject *tmp = GETLOCAL(i); \
+ GETLOCAL(i) = value; \
+ Py_XDECREF(tmp); } while (0)
/* Start of code */