Thanks to visit codestin.com
Credit goes to github.com

Skip to content

gh-142555: Fix null pointer dereference in array.__setitem__ via re-entrant __index__ #142713

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
encukou merged 22 commits into from
Feb 2, 2026
+107 −1
Merged

gh-142555: Fix null pointer dereference in array.__setitem__ via re-entrant __index__ #142713

Changes from 1 commit
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
71fc725
Fix null pointer dereference in array.__setitem__ via re-entrant __in…
aisk Dec 14, 2025
6c437d5
Update Misc/NEWS.d/next/Core_and_Builtins/2025-12-15-02-02-45.gh-issu…
aisk Dec 15, 2025
e3c728a
Move the news entry to library folder
aisk Dec 15, 2025
67e98b5
Also check if the ob_item's size is changed by user's code
aisk Dec 17, 2025
ad18d48
Add check on more *_setitem methods
aisk Dec 17, 2025
c408c57
Check other setitem methods
aisk Dec 18, 2025
95e4eec
Reduce the comments
aisk Dec 18, 2025
fc6f987
Re-order the test
aisk Dec 18, 2025
c8cbd28
Refactor the array check codes to a function
aisk Dec 19, 2025
0b3db3c
Change the bound check from function to macro
aisk Dec 20, 2025
8eeba89
Revert the format changed made by IDE automatically
aisk Dec 20, 2025
e00b7a4
Revert more format changes
aisk Dec 20, 2025
2b6d5dc
Revert more format changes
aisk Dec 20, 2025
c83b64a
Revert more format test
aisk Dec 20, 2025
d0ff678
Update news entry
aisk Dec 20, 2025
e865d0d
Update Misc/NEWS.d/next/Library/2025-12-15-02-02-45.gh-issue-142555.E…
aisk Dec 27, 2025
0ad0f28
Refactor tests
aisk Dec 27, 2025
b3617c8
Format the macro by PEP7
aisk Dec 27, 2025
deccbf0
Update by review comments
aisk Dec 27, 2025
a4dab68
Simplify the test
aisk Dec 27, 2025
1befa98
Update comment
aisk Dec 27, 2025
37ed8f8
Update Lib/test/test_array.py
aisk Dec 27, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Format the macro by PEP7
  • Loading branch information
@aisk
aisk committed Dec 27, 2025
commit b3617c861e8a7aa423963b88c320e1a5d40ca228
34 changes: 19 additions & 15 deletions Modules/arraymodule.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -209,23 +209,27 @@ in bounds; that's the responsibility of the caller.
user-defined methods (like __index__ or __float__) that might modify
the array during the call.
*/
#define CHECK_ARRAY_BOUNDS(ap, i) \
do { \
if ((i) >= 0 && ((ap)->ob_item == NULL || (i) >= Py_SIZE((ap)))) { \
PyErr_SetString(PyExc_IndexError, "array assignment index out of range"); \
return -1; \
} \
#define CHECK_ARRAY_BOUNDS(OP, IDX) \
do { \
if ((IDX) >= 0 && ((OP)->ob_item == NULL || \
(IDX) >= Py_SIZE((OP)))) { \
PyErr_SetString(PyExc_IndexError, \
"array assignment index out of range"); \
return -1; \
} \
} while (0)

#define CHECK_ARRAY_BOUNDS_WITH_CLEANUP(ap, i, v, cleanup) \
do { \
if ((i) >= 0 && ((ap)->ob_item == NULL || (i) >= Py_SIZE((ap)))) { \
PyErr_SetString(PyExc_IndexError, "array assignment index out of range"); \
if (cleanup) { \
Py_DECREF(v); \
} \
return -1; \
} \
#define CHECK_ARRAY_BOUNDS_WITH_CLEANUP(OP, IDX, VAL, CLEANUP) \
do { \
if ((IDX) >= 0 && ((OP)->ob_item == NULL || \
(IDX) >= Py_SIZE((OP)))) { \
PyErr_SetString(PyExc_IndexError, \
"array assignment index out of range"); \
if (CLEANUP) { \
Py_DECREF(VAL); \
} \
return -1; \
} \
} while (0)

static PyObject *
Expand Down
Loading