From f8940e43df66c51815c0c45bc1cdca9dcb4e8723 Mon Sep 17 00:00:00 2001 From: Valery Fedorenko Date: Thu, 31 Oct 2024 16:09:35 +0300 Subject: [PATCH 1/4] Replace Py_DECREF by Py_XDECREF --- Python/compile.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Python/compile.c b/Python/compile.c index d463fcde204a05..caac1277804a76 100644 --- a/Python/compile.c +++ b/Python/compile.c @@ -901,7 +901,7 @@ _PyCompile_LookupArg(compiler *c, PyCodeObject *co, PyObject *name) c->u->u_metadata.u_name, co->co_name, freevars); - Py_DECREF(freevars); + Py_XDECREF(freevars); return ERROR; } return arg; From 10dcbe01539c065ede0086dfce158faf85adf9c0 Mon Sep 17 00:00:00 2001 From: "blurb-it[bot]" <43283697+blurb-it[bot]@users.noreply.github.com> Date: Thu, 31 Oct 2024 13:14:28 +0000 Subject: [PATCH 2/4] =?UTF-8?q?=F0=9F=93=9C=F0=9F=A4=96=20Added=20by=20blu?= =?UTF-8?q?rb=5Fit.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../next/Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst | 1 + 1 file changed, 1 insertion(+) create mode 100644 Misc/NEWS.d/next/Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst diff --git a/Misc/NEWS.d/next/Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst b/Misc/NEWS.d/next/Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst new file mode 100644 index 00000000000000..3895739147a5af --- /dev/null +++ b/Misc/NEWS.d/next/Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst @@ -0,0 +1 @@ +Fix a possible ``NULL`` pointer dereference in :c:func:`!_PyCompile_LookupArg`. From 2c8bc0fb5825817cf13778ad988a1bf8b89dfed6 Mon Sep 17 00:00:00 2001 From: Valery Fedorenko Date: Thu, 31 Oct 2024 16:32:38 +0300 Subject: [PATCH 3/4] Update Misc/NEWS.d/next/Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst Co-authored-by: Peter Bierma --- .../Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Misc/NEWS.d/next/Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst b/Misc/NEWS.d/next/Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst index 3895739147a5af..98785947b0d31c 100644 --- a/Misc/NEWS.d/next/Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst +++ b/Misc/NEWS.d/next/Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst @@ -1 +1 @@ -Fix a possible ``NULL`` pointer dereference in :c:func:`!_PyCompile_LookupArg`. +Fix a possible crash internally when compiling. From 547eca1da57cd237544f060b74c442f600e8d866 Mon Sep 17 00:00:00 2001 From: Valery Fedorenko Date: Fri, 1 Nov 2024 06:12:16 +0300 Subject: [PATCH 4/4] Remove news entry due to "skip news" label --- .../next/Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst | 1 - 1 file changed, 1 deletion(-) delete mode 100644 Misc/NEWS.d/next/Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst diff --git a/Misc/NEWS.d/next/Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst b/Misc/NEWS.d/next/Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst deleted file mode 100644 index 98785947b0d31c..00000000000000 --- a/Misc/NEWS.d/next/Security/2024-10-31-13-14-27.gh-issue-126238.CZqaon.rst +++ /dev/null @@ -1 +0,0 @@ -Fix a possible crash internally when compiling.