Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit b4ba986

Browse files
author
Victor Stinner
committed
Issue #9402: pyexpat uses Py_DECREF() instead of PyObject_DEL()
Fix a crash if Python is compiled in pydebug mode.
1 parent 3d75d0c commit b4ba986

2 files changed

Lines changed: 27 additions & 15 deletions

File tree

Lib/test/test_pyexpat.py

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -221,6 +221,25 @@ def collector(name, *args):
221221
# L should have the same string repeated over and over.
222222
self.assertTrue(tag is entry)
223223

224+
def test_issue9402(self):
225+
# create an ExternalEntityParserCreate with buffer text
226+
class ExternalOutputter:
227+
def __init__(self, parser):
228+
self.parser = parser
229+
self.parser_result = None
230+
231+
def ExternalEntityRefHandler(self, context, base, sysId, pubId):
232+
external_parser = self.parser.ExternalEntityParserCreate("")
233+
self.parser_result = external_parser.Parse("", 1)
234+
return 1
235+
236+
parser = expat.ParserCreate(namespace_separator='!')
237+
parser.buffer_text = 1
238+
out = ExternalOutputter(parser)
239+
parser.ExternalEntityRefHandler = out.ExternalEntityRefHandler
240+
parser.Parse(data, 1)
241+
self.assertEquals(out.parser_result, 1)
242+
224243

225244
class BufferTextTest(unittest.TestCase):
226245
def setUp(self):

Modules/pyexpat.c

Lines changed: 8 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -973,21 +973,7 @@ xmlparse_ExternalEntityParserCreate(xmlparseobject *self, PyObject *args)
973973
return NULL;
974974
new_parser->buffer_size = self->buffer_size;
975975
new_parser->buffer_used = 0;
976-
if (self->buffer != NULL) {
977-
new_parser->buffer = malloc(new_parser->buffer_size);
978-
if (new_parser->buffer == NULL) {
979-
#ifndef Py_TPFLAGS_HAVE_GC
980-
/* Code for versions 2.0 and 2.1 */
981-
PyObject_Del(new_parser);
982-
#else
983-
/* Code for versions 2.2 and later. */
984-
PyObject_GC_Del(new_parser);
985-
#endif
986-
return PyErr_NoMemory();
987-
}
988-
}
989-
else
990-
new_parser->buffer = NULL;
976+
new_parser->buffer = NULL;
991977
new_parser->ordered_attributes = self->ordered_attributes;
992978
new_parser->specified_attributes = self->specified_attributes;
993979
new_parser->in_callback = 0;
@@ -1003,6 +989,13 @@ xmlparse_ExternalEntityParserCreate(xmlparseobject *self, PyObject *args)
1003989
PyObject_GC_Init(new_parser);
1004990
#endif
1005991

992+
if (self->buffer != NULL) {
993+
new_parser->buffer = malloc(new_parser->buffer_size);
994+
if (new_parser->buffer == NULL) {
995+
Py_DECREF(new_parser);
996+
return PyErr_NoMemory();
997+
}
998+
}
1006999
if (!new_parser->itself) {
10071000
Py_DECREF(new_parser);
10081001
return PyErr_NoMemory();

0 commit comments

Comments
 (0)