cpython

mirror of https://github.com/python/cpython.git synced 2026-07-11 04:21:21 -04:00

Files

T

Miss Islington (bot) 404113bd37 [3.15] gh-148660: Fix use-after-free in OrderedDict.copy() on reentrant mutation (GH-151573) (#152540 )

gh-148660: Fix use-after-free in OrderedDict.copy() on reentrant mutation (GH-151573)

* gh-148660: Fix use-after-free in OrderedDict.copy() on reentrant mutation

OrderedDict.copy() walks the internal linked list while building the new
dict. The loop body can run arbitrary Python (a key's __eq__/__hash__, or
a subclass __getitem__/__setitem__) which can clear the source dict and
free the nodes being iterated.

Detect this the same way OrderedDict.__eq__ already does (gh-119004):
snapshot od_state before the loop, hold a strong reference to the key and
read the hash before any reentrant call, and raise RuntimeError if the
state changed before advancing to the next node.

* gh-148660: fix NEWS nit, suppress undocumented OrderedDict.copy xref
(cherry picked from commit 7d128e319f)

Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com>

2026-06-29 02:34:20 +00:00

clinic

[3.15] gh-150285: Fix too long docstrings in builtins (GH-150293) (GH-150336)

2026-05-24 16:24:57 +03:00

mimalloc

[3.15] gh-151065: Copy fix for memory leak from mimalloc upstream (GH-151066) (GH-151383)

2026-06-11 22:39:37 +00:00

stringlib

[3.15] gh-151295: Fix use-after-free in bytes.join()/bytearray.join() via re-entrant __buffer__ (GH-151296) (GH-151304)

2026-06-11 11:30:24 +03:00

abstract.c

[3.15] gh-141510 Add frozendict fast paths to abstract.c (GH-150692) (#151704 )

2026-06-19 09:08:08 +00:00

boolobject.c

…

bytearrayobject.c

[3.15] gh-150285: Fix too long docstrings in builtins (GH-150293) (GH-150336)

2026-05-24 16:24:57 +03:00

bytes_methods.c

[3.15] gh-150285: Fix too long docstrings in builtins (GH-150293) (GH-150336)

2026-05-24 16:24:57 +03:00

bytesobject.c

[3.15] gh-150285: Fix too long docstrings in builtins (GH-150293) (GH-150336)

2026-05-24 16:24:57 +03:00

call.c

…

capsule.c

…

cellobject.c

…

classobject.c

…

codeobject.c

[3.15] gh-151763: Fix possible crash on CodeType deallocation (GH-152034) (#152069 )

2026-06-24 12:17:41 +00:00

complexobject.c

…

descrobject.c

[3.15] gh-150319: Replace all documentation which says "See PEP 585" (GH-150325) (#150808 )

2026-06-02 20:40:52 +00:00

dictnotes.txt

…

dictobject.c

[3.15] gh-151722: Defer GC tracking in frozendict.copy() (GH-152230) (#152271 )

2026-06-26 12:26:17 +00:00

enumobject.c

[3.15] gh-150319: Replace all documentation which says "See PEP 585" (GH-150325) (#150808 )

2026-06-02 20:40:52 +00:00

exceptions.c

[3.15] gh-150988: Fix refleak in OSError when attrs are set before super().__init__() (GH-150990) (#151240 )

2026-06-10 12:56:54 +00:00

fileobject.c

…

floatobject.c

[3.15] gh-150285: Fix too long docstrings in builtins (GH-150293) (GH-150336)

2026-05-24 16:24:57 +03:00

frameobject.c

[3.15] gh-151905: fix memory error handling in PyFrame_GetBack (GH-151906) (#151919 )

2026-06-23 09:28:59 +03:00

funcobject.c

…

genericaliasobject.c

[3.15] gh-150285: Fix too long docstrings in GenericAlias and __class_getitem__ (GH-151354) (GH-151367)

2026-06-11 17:22:52 +00:00

genobject.c

[3.15] gh-151436: Fix missing tstate->last_profiled_frame updates (GH-151437) (#151612 )

2026-06-19 10:24:53 +02:00

interpolationobject.c

[3.15] gh-150319: Replace all documentation which says "See PEP 585" (GH-150325) (#150808 )

2026-06-02 20:40:52 +00:00

iterobject.c

…

lazyimportobject.c

[3.15] PEP 810 - Update some error strings (GH-150126) (#150135 )

2026-05-20 15:17:28 +00:00

listobject.c

[3.15] gh-150319: Replace all documentation which says "See PEP 585" (GH-150325) (#150808 )

2026-06-02 20:40:52 +00:00

listsort.txt

…

longobject.c

[3.15] gh-151218: Replace sys.flags in PyConfig_Set() (GH-151402) (#151552 )

2026-06-16 16:48:56 +00:00

memoryobject.c

[3.15] gh-150319: Replace all documentation which says "See PEP 585" (GH-150325) (#150808 )

2026-06-02 20:40:52 +00:00

methodobject.c

…

moduleobject.c

[3.15] gh-150052: Resolve un-loaded lazily loaded submodules via module.__getattr__ instead of publishing lazy values (#150055 )

2026-05-19 21:23:30 +00:00

namespaceobject.c

…

object_layout_312.gv

…

object_layout_312.png

…

object_layout_313.gv

…

object_layout_313.png

…

object_layout_full_312.gv

…

object_layout_full_312.png

…

object_layout_full_313.gv

…

object_layout_full_313.png

…

object_layout.md

…

object.c

[3.15] gh-123619: Fix PyUnstable_Object_EnableDeferredRefcount() (GH-151260) (#151326 )

2026-06-11 11:21:26 +00:00

obmalloc.c

[3.15] gh-151297: Fix undefined behavior in _PyObject_MiRealloc (GH-151358) (GH-151388)

2026-06-12 01:47:01 +00:00

odictobject.c

[3.15] gh-148660: Fix use-after-free in OrderedDict.copy() on reentrant mutation (GH-151573) (#152540 )

2026-06-29 02:34:20 +00:00

picklebufobject.c

…

rangeobject.c

…

README

…

sentinelobject.c

[3.15] gh-148829: Make sentinels' repr and module customizable (GH-149654) (#150092 )

2026-05-22 07:44:34 -07:00

setobject.c

[3.15] gh-152235: Defer GC tracking in set.union and set.difference (gh-152290) (gh-152316)

2026-06-26 17:54:25 +00:00

sliceobject.c

[3.15] gh-150319: Replace all documentation which says "See PEP 585" (GH-150325) (#150808 )

2026-06-02 20:40:52 +00:00

structseq.c

…

templateobject.c

[3.15] gh-150319: Replace all documentation which says "See PEP 585" (GH-150325) (#150808 )

2026-06-02 20:40:52 +00:00

tupleobject.c

[3.15] gh-150285: Fix too long docstrings in GenericAlias and __class_getitem__ (GH-151354) (GH-151367)

2026-06-11 17:22:52 +00:00

typeobject.c

[3.15] gh-151126: Add missing PyErr_NoMemory() in type_from_slots_or_spec (GH-151582) (#152016 )

2026-06-23 15:15:00 +00:00

typevarobject.c

[3.15] gh-150285: Fix too long docstrings in GenericAlias and __class_getitem__ (GH-151354) (GH-151367)

2026-06-11 17:22:52 +00:00

unicode_format.c

[3.15] gh-151845: Fix formatfloat() return-value contract in unicode_format.c (GH-151846) (#151865 )

2026-06-21 17:43:01 +00:00

unicode_formatter.c

…

unicode_writer.c

…

unicodectype.c

…

unicodeobject.c

[3.15] gh-150285: Fix too long docstrings in builtins (GH-150293) (GH-150336)

2026-05-24 16:24:57 +03:00

unicodetype_db.h

…

unionobject.c

[3.15] gh-150319: Replace all documentation which says "See PEP 585" (GH-150325) (#150808 )

2026-06-02 20:40:52 +00:00

weakrefobject.c

[3.15] gh-150319: Replace all documentation which says "See PEP 585" (GH-150325) (#150808 )

2026-06-02 20:40:52 +00:00

README

Source files for various builtin objects