Thanks to visit codestin.com
Credit goes to github.com

Skip to content

gh-143309: fix UAF in os.execve when the environment is concurrently mutated #143314

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
picnixz merged 13 commits into from
Jan 3, 2026
+60 −18
Merged

gh-143309: fix UAF in os.execve when the environment is concurrently mutated #143314

Changes from 1 commit
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
243b880
gh-143309: fix UAF in `os.execve` when the environment is concurrentl…
picnixz Dec 31, 2025
be3bd3d
simplify error handling
picnixz Jan 1, 2026
6750191
fix double-free
picnixz Jan 1, 2026
a7a572c
fix tests on Windows
picnixz Jan 1, 2026
6202904
fortify invokation of `assert_python_ok`
picnixz Jan 1, 2026
71e7277
Apply suggestion from @chris-eibl
chris-eibl Jan 1, 2026
e074d33
fix tests
picnixz Jan 1, 2026
5bd7d39
try to fix Windows tests
picnixz Jan 1, 2026
7b6e2db
fix Windows failures (take 2)
picnixz Jan 1, 2026
c944ef8
remove test crashing on Windows
picnixz Jan 1, 2026
fefb95a
update comment
picnixz Jan 1, 2026
de838f5
Update Misc/NEWS.d/next/Library/2025-12-31-20-43-02.gh-issue-143309.c…
picnixz Jan 2, 2026
d8f9c52
Update Lib/test/test_os/test_os.py
picnixz Jan 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
fortify invokation of assert_python_ok
  • Loading branch information
@picnixz
picnixz committed Jan 1, 2026
commit 6202904cc944b5ad690ba46fb1059d50f9041ff0
4 changes: 3 additions & 1 deletion Lib/test/test_os/test_os.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2656,7 +2656,9 @@ def values(self): return VALUES
os.execve(args[0], args, MyEnv())
""".format(message=message)

rc, out, _ = assert_python_ok('-c', code)
# Use '__cleanenv' to signal to assert_python_ok() not
# to do a copy of os.environ on its own.
rc, out, _ = assert_python_ok('-c', code, __cleanenv=True)
self.assertEqual(rc, 0)
self.assertIn(bytes(message, "ascii"), out)

Expand Down
Loading