Skip to content

gh-142560: bytearray: prevent UAF in search-like methods by exporting self buffer #142564

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
fatelei wants to merge 22 commits into
base: main
Choose a base branch
from
+87 −36
Open

gh-142560: bytearray: prevent UAF in search-like methods by exporting self buffer #142564

Changes from 1 commit
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
887afac
fix: bytearray: prevent UAF in search-like methods by exporting self …
fatelei Dec 11, 2025
2dd958b
chore: add blurb
fatelei Dec 11, 2025
2cb388b
fix: fix new format
fatelei Dec 11, 2025
b954fc7
fix: fix python lint error and make code more simple
fatelei Dec 12, 2025
87b5cce
fix: fix code not regenerate
fatelei Dec 12, 2025
f1b7596
fix: fix ubuntu test failed for ass_subscript2
fatelei Dec 12, 2025
13a6469
chore: add comment for method test_search_methods_reentrancy_raises_b…
fatelei Dec 12, 2025
b5efa3f
refactor: refactor test_search_methods_reentrancy_raises_buffererror …
fatelei Dec 12, 2025
62b2801
fix: fix pre commit failed
fatelei Dec 12, 2025
8419650
chore: using subTest to distinguish which method failed
fatelei Dec 12, 2025
2df5acb
chore: using more light operation instead of heavy operation
fatelei Dec 12, 2025
e6c622e
fix: fix pre-commit error
fatelei Dec 12, 2025
7964033
chore: resolve comment
fatelei Dec 15, 2025
8b1cea2
chore: resolve comment
fatelei Dec 15, 2025
782cab1
chore: update the news
fatelei Dec 15, 2025
14963ea
chore: bytearray_contains add Py_BEGIN_CRITICAL_SECTION back
fatelei Dec 15, 2025
87225ad
fix: fix build failed
fatelei Dec 15, 2025
4214d56
chore: resolve comment
fatelei Dec 15, 2025
01fcc68
fix: fix pre commit error
fatelei Dec 15, 2025
6a58ffe
fix: fix news format
fatelei Dec 15, 2025
abb9fb7
fix: fix news format
fatelei Dec 15, 2025
81a611d
chore: change args order
fatelei Dec 18, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
fix: fix ubuntu test failed for ass_subscript2
  • Loading branch information
@fatelei
fatelei committed Dec 12, 2025
commit f1b759665b28bb78c7b4a38bd697a70eb0b3bb6c
5 changes: 4 additions & 1 deletion Lib/test/test_bytes.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2615,7 +2615,10 @@ def ass_subscript(b, a): # MODIFIES!

def ass_subscript2(b, a, c): # MODIFIES!
b.wait()
a[:] = c
try:
a[:] = c
except BufferError:
return
assert b'\xdd' not in a

def mod(b, a):
Expand Down
Loading