cpython

mirror of https://github.com/python/cpython.git synced 2026-05-06 12:49:07 -04:00

Files

T

Pablo Galindo Salgado 316f6265b7 [3.14] gh-148178: Validate remote debug offset tables on load (GH-148187) (#148577 )

Treat the debug offset tables read from a target process as untrusted input
and validate them before the unwinder uses any reported sizes or offsets.

Add a shared validator in debug_offsets_validation.h and run it once when
_Py_DebugOffsets is loaded and once when AsyncioDebug is loaded. The checks
cover section sizes used for fixed local buffers and every offset that is
later dereferenced against a local buffer or local object view. This keeps
the bounds checks out of the sampling hot path while rejecting malformed
tables up front.
(cherry picked from commit 289fd2c97a)

2026-05-04 22:43:43 +01:00

_ctypes

[3.14] gh-148967: Fix FFI type pointer handling for C complex support in set_stginfo_ffi_type_pointer (GH-148969) (GH-149224)

2026-05-01 15:43:38 +02:00

_decimal

[3.14] gh-143331: Schedule to remove format "N" for Decimal (GH-143372) (#143476 )

2026-01-06 15:58:29 +02:00

_hacl

[3.14] gh-140120: Refresh HACL* to fix an hmac memory leak (GH-140188) (#140192 )

2025-10-16 20:53:12 -07:00

_io

[3.14] gh-144777: Fix data races in IncrementalNewlineDecoder (gh-144971) (#145143 )

2026-02-23 15:25:03 +00:00

_multiprocessing

…

_sqlite

[3.14] gh-146090: fix memory management of internal sqlite3 callback contexts (GH-146569) (#146595 )

2026-03-29 15:15:05 +02:00

_sre

[3.14] gh-116738: Fix thread-safety issue in re module for free threading (gh-141923) (gh-141990)

2025-11-26 21:08:39 +00:00

_ssl

[3.14] gh-134698: Hold a lock when the thread state is detached in ssl (GH-134724) (GH-137107)

2025-10-07 18:49:22 +00:00

_testcapi

[3.14] gh-143050: Correct PyLong_FromString() to use _PyLong_Negate() (GH-145901) (#147331 )

2026-03-31 16:14:12 +02:00

_testinternalcapi

[3.14] gh-144513: Skip critical section locking during stop-the-world (gh-144524) (#145570 )

2026-03-06 12:00:17 -05:00

_testlimitedcapi

[3.14] gh-132657: add regression test for PySet_Contains with unhashable type (GH-141411) (#141468 )

2025-11-12 15:49:09 +00:00

_xxtestfuzz

…

_zstd

[3.14] gh-146578: _zstd: Fix printf format for pledged size errors (GH-146576) (#148855 )

2026-04-21 13:31:46 -07:00

cjkcodecs

[3.14] gh-101828: Fix jisx0213 codecs removing null characters (gh-139340) (gh-140110)

2025-10-14 14:36:05 +00:00

clinic

[3.14] gh-148973: fix segfault on mismatch between consts size and oparg in compiler (GH-148974) (#148980 )

2026-04-25 13:53:42 +01:00

expat

[3.14] gh-149017: Upgrade bundled Expat to 2.8.0 (GH-149020) (#149073 )

2026-04-28 16:30:12 +03:00

_abc.c

…

_asynciomodule.c

[3.14] gh-148274: properly handle result from PyObject_VisitManagedDict (GH-148275) (#148295 )

2026-04-09 13:49:09 +00:00

_bisectmodule.c

…

_bz2module.c

[3.14] gh-148395: Fix a possible UAF in {LZMA,BZ2,_Zlib}Decompressor (GH-148396) (#148480 )

2026-04-13 01:40:54 +00:00

_codecsmodule.c

…

_collectionsmodule.c

[3.14] gh-145492: Fix defaultdict __repr__ infinite recursion (GH-145659) (GH-145747)

2026-03-12 10:45:31 +01:00

_csv.c

[3.14] gh-145105: Fix crash in csv.reader with re-entrant iterator (GH-145106) (#148404 )

2026-04-11 22:46:26 +00:00

_curses_panel.c

[3.14] gh-116946: fully implement GC protocol for _curses_panel.panel (GH-138333) (#138427 )

2025-09-06 21:20:35 +03:00

_cursesmodule.c

[3.14] gh-137920: Fix semantically relevant typo in curses.window.attron (#137940 ) (GH-138506)

2025-10-07 22:21:41 +02:00

_datetimemodule.c

[3.14] gh-139774: use relaxed atomics for datetime hashes (GH-139775) (#139780 )

2025-10-08 21:09:09 +05:30

_dbmmodule.c

[3.14] gh-116738: Add critical section to dbm/gdbm context manager (gh-140391) (gh-140459)

2025-10-22 15:44:09 +00:00

_elementtree.c

[3.14] gh-148735: Fix a UAF in Element.findtext() (GH-148738) (#148916 )

2026-04-24 21:38:15 +01:00

_functoolsmodule.c

[3.14] gh-145446: Add critical section in functools module for PyDict_Next (GH-145487) (GH-145879)

2026-03-13 13:21:04 +01:00

_gdbmmodule.c

[3.14] gh-116738: Add critical section to dbm/gdbm context manager (gh-140391) (gh-140459)

2025-10-22 15:44:09 +00:00

_hashopenssl.c

[3.14] gh-145301: Fix double-free in hashlib and hmac module initialization (GH-145321) (#145523 )

2026-03-05 04:13:02 +00:00

_heapqmodule.c

[3.14] Fix comments for heapq.siftup_max (GH-135359) (#136232 )

2025-07-03 10:17:10 +00:00

_interpchannelsmodule.c

[3.14] gh-140652: Fix a crash in _interpchannels.list_all() after closing a channel (GH-143743) (GH-144954)

2026-02-18 13:29:34 +00:00

_interpqueuesmodule.c

[3.14] gh-140306: Fix memory leaks in cross-interpreter data handling (GH-140307) (GH-140338)

2025-10-19 19:53:36 +00:00

_interpreters_common.h

[3.14] gh-132775: Use _PyObject_GetXIData (With Fallback) (gh-134507)

2025-05-22 07:21:05 -06:00

_interpretersmodule.c

[3.14] Revert "gh-112068: C API: Add support of nullable arguments in PyArg_Parse (GH-121303)" (GH-136991) (#137006 )

2025-07-22 19:16:31 +03:00

_json.c

[3.14] gh-143196: Fix crash in non-standard use of internal JSON encoder object (GH-143618) (GH-143748)

2026-01-12 18:50:40 +00:00

_localemodule.c

[3.14] Fix unlikely potential reference leak in _locale._getdefaultlocale (GH-145250) (GH-145302)

2026-02-27 08:31:11 +00:00

_lsprof.c

[3.14] gh-116738: make cProfile module thread-safe (GH-138229) (#138575 )

2025-10-07 18:51:22 +00:00

_lzmamodule.c

[3.14] gh-148395: Fix a possible UAF in {LZMA,BZ2,_Zlib}Decompressor (GH-148396) (#148480 )

2026-04-13 01:40:54 +00:00

_math.h

…

_opcode.c

[3.14] gh-135755: Move SPECIAL_ constants to a private header (GH-135922) (GH-135926)

2025-06-25 13:36:46 +02:00

_operator.c

…

_pickle.c

[3.14] gh-146059: Call fast_save_leave() in pickle save_frozenset() (GH-146173) (#146473 )

2026-03-26 17:02:20 +00:00

_posixsubprocess.c

[3.14] gh-141659: Fix bad file descriptor error in subprocess on AIX (GH-141660) (GH-141738)

2025-11-19 08:05:01 +00:00

_queuemodule.c

[3.14] gh-145376: Fix refleak in queuemodule.c out-of-memory path (GH-145543) (#145622 )

2026-03-08 13:32:51 +05:30

_randommodule.c

[3.14] Fix a compiler warning in _randommodule.c (GH-141058) (#141063 )

2025-11-05 19:10:32 +00:00

_remote_debugging_module.c

[3.14] gh-148178: Validate remote debug offset tables on load (GH-148187) (#148577 )

2026-05-04 22:43:43 +01:00

_scproxy.c

…

_ssl_data_35.h

[3.14] gh-149254: Update CI to use latest OpenSSL versions (GH-149333)

2026-05-03 21:11:42 +00:00

_ssl_data_111.h

gh-131423: Update OpenSSL data to 3.4.1 on Linux (#131618 )

2025-04-25 10:26:58 +02:00

_ssl_data_300.h

…

_ssl_data_340.h

gh-131423: Update OpenSSL data to 3.4.1 on Linux (#131618 )

2025-04-25 10:26:58 +02:00

_ssl.c

[3.14] gh-146615: Fix format specifiers in extension modules (GH-146617) (GH-146652)

2026-03-31 10:07:09 +00:00

_ssl.h

…

_stat.c

[3.14] gh-108765: fix comment about macro definitions in _stat.c post GH-108854 (GH-136027) (#136043 )

2025-06-27 15:40:34 +00:00

_statisticsmodule.c

…

_struct.c

[3.14] gh-148529: Minor improvements of the struct module documentation (GH-148565) (GH-149063)

2026-04-27 23:07:00 +03:00

_suggestions.c

…

_sysconfig.c

…

_testbuffer.c

…

_testcapi_feature_macros.inc

…

_testcapimodule.c

[3.14] gh-148274: properly handle result from PyObject_VisitManagedDict (GH-148275) (#148295 )

2026-04-09 13:49:09 +00:00

_testclinic_limited.c

…

_testclinic.c

[3.14] gh-144545: Improve handling of default values in Argument Clinic (GH-146016) (GH-146052)

2026-03-17 10:55:15 +00:00

_testimportmultiple.c

…

_testinternalcapi.c

[3.14] GH-148726: Add heap_size to _gc_runtime_state (#149025 )

2026-04-29 13:04:11 +03:00

_testlimitedcapi.c

…

_testmultiphase.c

…

_testsinglephase.c

[3.14] gh-144601: Avoid sharing exception objects raised in a PyInit function across multiple interpreters (GH-144602) (GH-144633)

2026-02-16 10:37:46 -05:00

_threadmodule.c

[3.14] gh-143191: Use _PyOS_MIN_STACK_SIZE in _thread.stack_size() (GH-143601) (#143611 )

2026-01-09 15:34:39 +00:00

_tkinter.c

[3.14] gh-143310: fix crash in Tcl object conversion with concurrent mutations (GH-143321) (#143343 )

2026-01-02 10:17:13 +00:00

_tracemalloc.c

…

_typesmodule.c

…

_typingmodule.c

…

_uuidmodule.c

[3.14] gh-132710: only use stable _uuid.generate_time_safe() to deduce MAC address (GH-132901) (#134697 )

2025-05-26 10:45:36 +00:00

_weakref.c

…

_winapi.c

…

_zoneinfo.c

[3.14] gh-145883: Fix two heap-buffer-overflows in _zoneinfo (GH-145885) (#148087 )

2026-04-04 17:13:13 +01:00

addrinfo.h

…

arraymodule.c

[3.14] gh-148484: Fix memory leak of iterator in array.array constructor (GH-148523) (GH-148678)

2026-04-23 16:00:37 +02:00

atexitmodule.c

[3.14] gh-144986: Fix memory leak in atexit.register() (GH-144987) (#145020 )

2026-03-16 13:56:05 +05:30

binascii.c

[3.14] gh-148093: Raise binascii.Error from binascii.a2b_uu() on empty input (GH-149077) (GH-149350)

2026-05-04 10:10:47 +00:00

blake2module.c

[3.14] gh-144545: Improve handling of default values in Argument Clinic (GH-146016) (GH-146052)

2026-03-17 10:55:15 +00:00

cmathmodule.c

[3.14] gh-116738: Statically initialize special constants in cmath module (gh-142161) (gh-142261)

2025-12-04 14:51:55 +00:00

config.c.in

…

errnomodule.c

…

faulthandler.c

[3.14] gh-137185: Fix _Py_DumpStack() async signal safety (gh-137187) (gh-137206)

2025-10-07 18:11:46 +00:00

fcntlmodule.c

[3.14] gh-140615: Update docstrings in the fcntl module (GH-140619) (GH-141231)

2025-11-08 11:16:45 +00:00

gc_weakref.txt

…

gcmodule.c

[3.14] GH-148726: Forward-port generational GC (#148720 )

2026-04-26 21:12:52 +03:00

getaddrinfo.c

…

getbuildinfo.c

…

getnameinfo.c

…

getpath_noop.c

…

getpath.c

…

getpath.py

[3.14] gh-135773: have pyvenv.cfg without home key anchor a venv and deduce home (GH-135831) (#136287 )

2025-07-05 00:36:12 +10:00

grpmodule.c

[3.14] gh-116738: Make grp module thread-safe (GH-135434) (#136658 )

2025-07-15 11:03:33 +05:30

hashlib.h

[3.14] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134961 )

2025-06-01 10:26:56 +02:00

hmacmodule.c

[3.14] gh-145376: Fix crashes in md5module.c and hmacmodule.c (GH-145422) (#145610 )

2026-03-06 21:06:32 +00:00

itertoolsmodule.c

[3.14] gh-146613: Fix re-entrant use-after-free in itertools._grouper (GH-147962) (#148010 )

2026-04-06 18:23:08 +03:00

ld_so_aix.in

…

main.c

[3.14] gh-145376: Fix various reference leaks (GH-145377) (GH-145712)

2026-03-10 16:31:02 +01:00

makesetup

…

makexp_aix

…

mathmodule.c

[3.14] gh-132876: workaround broken ldexp() on Windows 10 (GH-133135) (#134684 )

2025-05-25 22:23:45 -05:00

md5module.c

[3.14] gh-145376: Fix crashes in md5module.c and hmacmodule.c (GH-145422) (#145610 )

2026-03-06 21:06:32 +00:00

mmapmodule.c

[3.14] gh-116738: make mmap module thread-safe (GH-139237) (#139825 )

2025-10-09 20:19:03 +05:30

overlapped.c

[3.14] gh-148808: Add boundary check to asyncio.AbstractEventLoop.sock_recvf… (GH-148809) (#148837 )

2026-04-21 21:56:19 +05:30

posixmodule.c

[3.14] gh-144545: Improve handling of default values in Argument Clinic (GH-146016) (GH-146052)

2026-03-17 10:55:15 +00:00

posixmodule.h

…

pwdmodule.c

…

pyexpat.c

[3.14] gh-144984: Fix crash in Expat's ExternalEntityParserCreate error paths (GH-144992) (#146019 )

2026-03-17 01:49:39 +01:00

readline.c

[3.14] gh-122431: Correct the non-negative error message in readline.append_history_file (GH-143075) (GH-143090)

2025-12-23 05:01:41 +00:00

README

…

resource.c

[3.14] gh-137044: Support large limit values in getrlimit() and setrlimit() (GH-137338) (#137506 )

2025-10-07 20:43:12 +02:00

rotatingtree.c

…

rotatingtree.h

…

selectmodule.c

gh-132987: Support __index__() in the select.kqueue_event constructor (GH-133094)

2025-04-29 13:55:14 +00:00

Setup

GH-132983: Build `_zstd` on Windows (#133366 )

2025-05-06 00:58:47 +01:00

Setup.bootstrap.in

[3.14] gh-136421: Load _datetime static types during interpreter initialization (GH-136583) (GH-136943)

2025-07-21 19:23:05 -04:00

Setup.stdlib.in

[3.14] gh-136421: Load _datetime static types during interpreter initialization (GH-136583) (GH-136943)

2025-07-21 19:23:05 -04:00

sha1module.c

[3.14] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134961 )

2025-06-01 10:26:56 +02:00

sha2module.c

[3.14] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134961 )

2025-06-01 10:26:56 +02:00

sha3module.c

[3.14] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134961 )

2025-06-01 10:26:56 +02:00

signalmodule.c

[3.14] gh-137490: Fix signal.sigwaitinfo() on NetBSD (GH-137523) (GH-138935)

2025-10-08 14:33:30 +02:00

socketmodule.c

[3.14] gh-144837: Improve documentation for more collection methods (GH-144841) (GH-146483)

2026-03-26 19:55:25 +00:00

socketmodule.h

[3.14] GH-131296: Fix clang-cl warning on Windows in socketmodule.h (GH-131832) (GH-146340)

2026-03-24 00:27:01 +01:00

symtablemodule.c

[3.14] gh-139748: fix leaks in AC error paths when using unicode FS-b… (#139789 )

2025-10-08 22:16:21 +05:30

syslogmodule.c

…

termios.c

…

timemodule.c

…

tkappinit.c

…

tkinter.h

…

unicodedata_db.h

…

unicodedata.c

[3.14] gh-88091: Fix unicodedata.decomposition() for Hangul Syllables (GH-144993) (GH-145189)

2026-02-25 00:27:09 +02:00

unicodename_db.h

[3.14] gh-80667: Fix lookup for Tangut ideographs in unicodedata (GH-144789) (GH-144871)

2026-02-16 14:25:43 +02:00

winreparse.h

…

xxlimited_35.c

…

xxlimited.c

[3.14] gh-134160: Add more comments for the xxlimited module (GH-140214) (GH-140664)

2025-10-28 10:24:11 +01:00

xxmodule.c

…

xxsubtype.c

…

zlibmodule.c

[3.14] gh-148395: Fix a possible UAF in {LZMA,BZ2,_Zlib}Decompressor (GH-148396) (#148480 )

2026-04-13 01:40:54 +00:00

README

Source files for standard library extension modules,
and former extension modules that are now builtin modules.