Skip to content

gh-142560: bytearray: prevent UAF in search-like methods by exporting self buffer #142564

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
fatelei wants to merge 21 commits into
base: main
Choose a base branch
from
+87 −36
Open

gh-142560: bytearray: prevent UAF in search-like methods by exporting self buffer #142564

Changes from 1 commit
Commits
Show all changes
21 commits
Select commit Hold shift + click to select a range
887afac
fix: bytearray: prevent UAF in search-like methods by exporting self …
fatelei Dec 11, 2025
2dd958b
chore: add blurb
fatelei Dec 11, 2025
2cb388b
fix: fix new format
fatelei Dec 11, 2025
b954fc7
fix: fix python lint error and make code more simple
fatelei Dec 12, 2025
87b5cce
fix: fix code not regenerate
fatelei Dec 12, 2025
f1b7596
fix: fix ubuntu test failed for ass_subscript2
fatelei Dec 12, 2025
13a6469
chore: add comment for method test_search_methods_reentrancy_raises_b…
fatelei Dec 12, 2025
b5efa3f
refactor: refactor test_search_methods_reentrancy_raises_buffererror …
fatelei Dec 12, 2025
62b2801
fix: fix pre commit failed
fatelei Dec 12, 2025
8419650
chore: using subTest to distinguish which method failed
fatelei Dec 12, 2025
2df5acb
chore: using more light operation instead of heavy operation
fatelei Dec 12, 2025
e6c622e
fix: fix pre-commit error
fatelei Dec 12, 2025
7964033
chore: resolve comment
fatelei Dec 15, 2025
8b1cea2
chore: resolve comment
fatelei Dec 15, 2025
782cab1
chore: update the news
fatelei Dec 15, 2025
14963ea
chore: bytearray_contains add Py_BEGIN_CRITICAL_SECTION back
fatelei Dec 15, 2025
87225ad
fix: fix build failed
fatelei Dec 15, 2025
4214d56
chore: resolve comment
fatelei Dec 15, 2025
01fcc68
fix: fix pre commit error
fatelei Dec 15, 2025
6a58ffe
fix: fix news format
fatelei Dec 15, 2025
abb9fb7
fix: fix news format
fatelei Dec 15, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
chore: using subTest to distinguish which method failed
  • Loading branch information
@fatelei
fatelei committed Dec 12, 2025
commit 84196509710dc237422daaede22516e3338f45ce
7 changes: 4 additions & 3 deletions Lib/test/test_bytes.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2067,16 +2067,17 @@ def __init__(self, ba):
self.ba = ba
def __index__(self):
self.ba.clear()
return 65
return ord("A")

def make_case():
ba = bytearray(b"A")
return ba, Evil(ba)

for name in ("find", "count", "index", "rindex", "rfind"):
ba, evil = make_case()
with self.assertRaises(BufferError):
getattr(ba, name)(evil)
with self.subTest(name):
with self.assertRaises(BufferError):
getattr(ba, name)(evil)


class AssortedBytesTest(unittest.TestCase):
Expand Down
Loading