cpython

mirror of https://github.com/python/cpython.git synced 2026-08-03 13:26:41 +08:00

History

Miss Islington (bot) 37f818caef

[3.13] gh-144833: Fix use-after-free in SSL module when SSL_new() fails (GH-144843) (#144859 )

gh-144833: Fix use-after-free in SSL module when SSL_new() fails (GH-144843)

In newPySSLSocket(), when SSL_new() returns NULL, Py_DECREF(self)
was called before _setSSLError(get_state_ctx(self), ...), causing
a use-after-free. Additionally, get_state_ctx() was called with
self (PySSLSocket*) instead of sslctx (PySSLContext*), which is
a type confusion bug.

Fix by calling _setSSLError() before Py_DECREF() and using
sslctx instead of self for get_state_ctx().
(cherry picked from commit c91638ca0671b8038831f963ed44e66cdda006a2)

Co-authored-by: Ramin Farajpour Cami <ramin.blackhat@gmail.com>

2026-02-16 03:09:58 +00:00

_blake2

[3.13] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134962 )

2025-06-01 10:27:02 +02:00

_ctypes

[3.13] gh-144100: Fix crash for POINTER(str) used in ctypes argtypes (#144108 ) (#144245 )

2026-01-27 12:59:55 +01:00

_decimal

[3.13] gh-143331: Schedule to remove format "N" for Decimal (GH-143372) (#143477 )

2026-01-06 14:02:32 +00:00

_hacl

…

_io

[3.13] gh-144380: Fix incorrect type check in buffered_iternext() (GH-144381) (#144390 )

2026-02-02 10:29:16 +00:00

_multiprocessing

[3.13] gh-111178: fix UBSan failures in Modules/_multiprocessing/semaphore.c (GH-129084) (#129100 )

2025-01-20 21:05:52 +00:00

_sqlite

[3.13] gh-142830: prevent some crashes when mutating sqlite3 callbacks (GH-143245) (#143323 )

2026-01-01 11:22:50 +00:00

_sre

[3.13] gh-140979: Fix off-by-one error in the RE code validator (GH-140984) (GH-141000)

2025-11-04 18:16:40 +02:00

_ssl

[3.13] gh-137583: Only lock the SSL context, not the SSL socket (GH-137588) (GH-137613)

2025-08-11 22:05:13 -04:00

_testcapi

[3.13] gh-136288: Fix error message in _testcapi/vectorcall.c (GH-136258) (GH-136295)

2025-07-04 16:17:10 +00:00

_testinternalcapi

[3.13] gh-135641: Fix flaky test_capi.test_lock_two_threads test case (gh-135642) (gh-135688)

2025-06-18 18:47:59 +00:00

_testlimitedcapi

[3.13] gh-132657: add regression test for PySet_Contains with unhashable type (GH-141411) (#141467 )

2025-11-12 21:12:18 +05:30

_xxtestfuzz

…

cjkcodecs

[3.13] gh-101828: Fix jisx0213 codecs removing null characters (gh-139340) (gh-140112)

2025-10-14 14:48:29 +00:00

clinic

[3.13] gh-140615: Update docstrings in the fcntl module (GH-140619) (GH-141231) (GH-141232)

2025-11-08 11:50:17 +00:00

expat

[3.13] gh-144363: Update bundled libexpat to 2.7.4 (GH-144365) (GH-144500)

2026-02-10 13:59:12 +01:00

_abc.c

…

_asynciomodule.c

[3.13] gh-126405: fix use-after-free in _asyncio.Future.remove_done_callback (GH-126733) (#126736 )

2024-11-12 13:04:27 +00:00

_bisectmodule.c

[3.13] gh-126035: add missing whitespace to *Py_EnterRecursiveCall() messages (GH-126036) (#126058 )

2024-10-27 22:19:37 +00:00

_bz2module.c

[3.13] gh-116946: Revert GC protocol for immutable empty heap types (GH-138322, GH-138323, GH-138326) (#138337 )

2025-09-01 21:14:47 +05:30

_codecsmodule.c

…

_collectionsmodule.c

[3.13] gh-143004: Fix possible use-after-free in collections.Counter.update() (GH-143044) (GH-143167)

2025-12-25 13:41:24 +02:00

_contextvarsmodule.c

…

_csv.c

[3.13] gh-137986: Fix and improve the csv functions docstrings (GH-137987) (GH-138108)

2025-08-24 08:37:41 +00:00

_curses_panel.c

[3.13] gh-116946: fully implement GC protocol for _curses_panel.panel (GH-138333) (#138428 )

2025-09-06 12:17:57 +02:00

_cursesmodule.c

[3.13] gh-137920: Fix semantically relevant typo in curses.window.attron (GH-137940) (GH-138507)

2025-10-07 22:22:18 +02:00

_datetimemodule.c

[3.13] gh-52551: Fix encoding issues in strftime() (GH-125193) (GH-125657)

2024-10-17 22:48:34 +03:00

_dbmmodule.c

…

_elementtree.c

[3.13] gh-143200: fix UAFs in Element.__{set,get}item__ when the element is concurrently mutated (GH-143226) (#143274 )

2025-12-29 18:15:28 +00:00

_functoolsmodule.c

[3.13] GH-140590: Fix setstate for functools.partial C-module (GH-140671) (#140699 )

2025-10-28 18:14:14 +05:30

_gdbmmodule.c

[3.13] gh-140272: Fix memory leak in _gdbm.gdbm.clear() (GH-140274) (GH-140289)

2025-10-18 11:00:10 +00:00

_hashopenssl.c

[3.13] gh-116946: Revert GC protocol for immutable empty heap types (GH-138322, GH-138323, GH-138326) (#138337 )

2025-09-01 21:14:47 +05:30

_heapqmodule.c

[3.13] Fix comments for heapq.siftup_max (GH-135359) (#136233 )

2025-07-03 10:15:01 +00:00

_interpchannelsmodule.c

[3.13] gh-140306: Fix memory leaks in cross-interpreter data handling (GH-140307) (GH-140357)

2025-10-20 10:13:15 +00:00

_interpqueuesmodule.c

[3.13] gh-140306: Fix memory leaks in cross-interpreter data handling (GH-140307) (GH-140357)

2025-10-20 10:13:15 +00:00

_interpreters_common.h

…

_interpretersmodule.c

[3.13] gh-135839: Fix module_traverse and module_clear in subinterp modules (GH-135937) (GH-135943)

2025-08-04 14:34:47 +02:00

_json.c

[3.13] gh-143544: Fix possible use-after-free in the JSON decoder when JSONDecodeError disappears during raising it (GH-143561) (#143734 )

2026-01-12 16:02:23 +00:00

_localemodule.c

[3.13] gh-130567: Fix possible crash in locale.strxfrm() (GH-138940) (GH-139266)

2025-09-24 13:48:08 +02:00

_lsprof.c

[3.13] gh-132250: Clear error in lsprof callback when method descriptor raises an excep… (GH-132251) (#132281 )

2025-04-08 17:19:40 -04:00

_lzmamodule.c

[3.13] gh-116946: Revert GC protocol for immutable empty heap types (GH-138322, GH-138323, GH-138326) (#138337 )

2025-09-01 21:14:47 +05:30

_math.h

…

_opcode.c

…

_operator.c

[3.13] gh-127065: Make methodcaller thread-safe in free threading build (GH-127109) (GH-127150)

2024-11-22 14:51:40 +00:00

_pickle.c

[3.13] gh-143638: Forbid cuncurrent use of the Pickler and Unpickler objects in C implementation (GH-143664) (GH-143687)

2026-01-11 12:34:36 +00:00

_posixsubprocess.c

[3.13] gh-141659: Fix bad file descriptor error in subprocess on AIX (GH-141660) (#141828 )

2025-11-21 18:10:01 +00:00

_queuemodule.c

[3.13] gh-135607: remove null checking of weakref list in dealloc of extension modules and objects (#135614 ) (#136126 )

2025-07-01 11:26:52 +02:00

_randommodule.c

[3.13] Fix a compiler warning in _randommodule.c (GH-141058) (#141064 )

2025-11-05 19:08:41 +00:00

_scproxy.c

…

_ssl_data_31.h

…

_ssl_data_111.h

…

_ssl_data_300.h

…

_ssl.c

[3.13] gh-144833: Fix use-after-free in SSL module when SSL_new() fails (GH-144843) (#144859 )

2026-02-16 03:09:58 +00:00

_ssl.h

…

_stat.c

[3.13] gh-108765: fix comment about macro definitions in _stat.c post GH-108854 (GH-136027) (#136044 )

2025-06-27 15:39:18 +00:00

_statisticsmodule.c

…

_struct.c

[3.13] Update struct.__doc__: _Bool available unconditionally (GH-143716) (#144071 )

2026-01-20 12:32:45 +00:00

_suggestions.c

[3.13] gh-131936: Strengthen check in _suggestions._generate_suggestions (GH-131945) (#131949 )

2025-03-31 17:54:20 +00:00

_sysconfig.c

…

_testbuffer.c

…

_testcapi_feature_macros.inc

…

_testcapimodule.c

[3.13] gh-87135: Hang non-main threads that attempt to acquire the GIL during finalization (GH-105805) (GH-137827)

2025-08-17 09:08:14 -07:00

_testclinic_limited.c

…

_testclinic.c

[3.13] gh-132753: Argument Clinic: Fix support of c_default for the bool converter (GH-132754) (GH-132766)

2025-04-21 07:10:31 +00:00

_testexternalinspection.c

[3.13] gh-130052: Fix search_map_for_section() error handling (GH-132594) (#132598 )

2025-04-16 14:21:58 +00:00

_testimportmultiple.c

…

_testinternalcapi.c

[3.13] gh-127791: Fix, document, and test PyUnstable_AtExit (GH-127793) (#127819 )

2024-12-11 13:40:45 +00:00

_testlimitedcapi.c

[3.13] gh-111495: Add PyFile tests (#129449 ) (#129477 )

2025-01-30 20:29:27 +01:00

_testmultiphase.c

[3.13] gh-129405: Fix doc for Py_mod_multiple_interpreters default, and add test (GH-129406) (GH-130507)

2025-02-24 16:49:35 +01:00

_testsinglephase.c

…

_threadmodule.c

[3.13] gh-137017: Ensure Thread.is_alive() only returns False after the underlying OS thread exits (gh-137315) (gh-138917)

2025-09-15 14:28:05 +01:00

_tkinter.c

[3.13] gh-143310: fix crash in Tcl object conversion with concurrent mutations (GH-143321) (#143344 )

2026-01-02 10:12:57 +00:00

_tracemalloc.c

[3.13] gh-128679: Fix tracemalloc.stop() race conditions (#128897 )

2025-01-18 23:39:07 +00:00

_typingmodule.c

…

_uuidmodule.c

[3.13] gh-132710: only use stable _uuid.generate_time_safe() to deduce MAC address (GH-132901) (#134704 )

2025-08-05 07:56:03 +00:00

_weakref.c

…

_winapi.c

gh-128217: Validate the normalized_environment variable instead of the similarly named function (GH-128220)

2024-12-24 13:29:56 +00:00

_zoneinfo.c

[3.13] gh-142783: Fix possible use after free in zoneinfo module (GH-142790) (GH-142861)

2025-12-17 09:21:20 +00:00

addrinfo.h

…

arraymodule.c

[3.13] gh-142555: Fix null pointer dereference in array.__setitem__ via re-entrant __index__ (GH-142713) (#144397 )

2026-02-02 21:06:59 +01:00

atexitmodule.c

[3.13] gh-142881: Fix concurrent and reentrant call of atexit.unregister() (GH-142901) (GH-143722)

2026-01-12 10:05:09 +00:00

binascii.c

…

cmathmodule.c

…

config.c.in

…

errnomodule.c

…

faulthandler.c

[3.13] gh-130163: Fix crashes related to PySys_GetObject() (GH-130503) (GH-130556)

2025-02-25 22:50:26 +00:00

fcntlmodule.c

[3.13] gh-140615: Update docstrings in the fcntl module (GH-140619) (GH-141231) (GH-141232)

2025-11-08 11:50:17 +00:00

gc_weakref.txt

…

gcmodule.c

[3.13] gh-138659: Typo in the gc module docstring (GH-138660) (#138663 )

2025-09-08 14:39:43 +00:00

getaddrinfo.c

…

getbuildinfo.c

…

getnameinfo.c

…

getpath_noop.c

…

getpath.c

…

getpath.py

…

grpmodule.c

[3.13] gh-126316: Make grp.getgrall() thread-safe: add a mutex (#127055 ) (#127104 )

2024-11-26 12:01:50 +01:00

hashlib.h

[3.13] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134962 )

2025-06-01 10:27:02 +02:00

itertoolsmodule.c

[3.13] gh-143543: Fix re-entrant use-after-free in itertools.groupby (GH-143738) (GH-144627)

2026-02-10 14:01:23 +01:00

ld_so_aix.in

…

main.c

[3.13] gh-129900: Fix SystemExit return codes when the REPL is started from the command line (GH-129901) (#131734 )

2025-03-25 20:15:00 +00:00

makesetup

…

makexp_aix

…

mathmodule.c

[3.13] gh-132876: workaround broken ldexp() on Windows 10 (GH-133135) (#134685 )

2025-05-25 22:39:34 -05:00

md5module.c

[3.13] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134962 )

2025-06-01 10:27:02 +02:00

mmapmodule.c

[3.13] gh-138204: Forbid expansion of a shared anonymous mmap on Linux (GH-138220) (GH-138387)

2025-09-03 11:33:08 +03:00

overlapped.c

[3.13] gh-143249: Fix buffer leak when overlapped operation fails to start on windows (GH-143250) (#143796 )

2026-01-13 13:53:41 +00:00

posixmodule.c

[3.13] gh-144023: Prevent follow_symlinks from being allowed with an fd of 0 (GH-144022) (#144152 )

2026-01-22 15:52:49 +00:00

posixmodule.h

…

pwdmodule.c

…

pyexpat.c

[3.13] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) (#139367 )

2025-11-02 12:39:11 +00:00

readline.c

[3.13] gh-122431: Correct the non-negative error message in readline.append_history_file (GH-143075) (GH-143091)

2025-12-23 04:59:43 +00:00

README

…

resource.c

[3.13] gh-137044: Support large limit values in getrlimit() and setrlimit() (GH-137338) (GH-137507)

2025-08-07 09:37:02 +00:00

rotatingtree.c

…

rotatingtree.h

…

selectmodule.c

…

Setup

…

Setup.bootstrap.in

…

Setup.stdlib.in

[3.13] gh-111495: Add PyFile tests (#129449 ) (#129477 )

2025-01-30 20:29:27 +01:00

sha1module.c

[3.13] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134962 )

2025-06-01 10:27:02 +02:00

sha2module.c

[3.13] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134962 )

2025-06-01 10:27:02 +02:00

sha3module.c

[3.13] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134962 )

2025-06-01 10:27:02 +02:00

signalmodule.c

[3.13] gh-137490: Fix signal.sigwaitinfo() on NetBSD (GH-137523) (GH-138936)

2025-09-15 16:43:32 +00:00

socketmodule.c

[3.13] gh-143637: Fix re-entrant mutation of ancillary data in socket.sendmsg() (GH-143892) (#144785 )

2026-02-13 15:58:59 +00:00

socketmodule.h

[3.13] gh-132429: Fix support of Bluetooth sockets on NetBSD and DragonFly BSD (GH-132431) (GH-132458)

2025-04-13 01:22:41 +03:00

symtablemodule.c

[3.13] gh-139748: fix leaks in AC error paths when using unicode FS-b… (#139792 )

2025-10-08 22:21:49 +05:30

syslogmodule.c

[3.13] gh-130163: Fix crashes related to PySys_GetObject() (GH-130503) (GH-130556)

2025-02-25 22:50:26 +00:00

termios.c

…

timemodule.c

[3.13] gh-130617 : fix time_clockid_converter on DragonFlyBSD (GH-130634) (#130666 )

2025-02-28 08:19:45 +00:00

tkappinit.c

…

tkinter.h

…

unicodedata_db.h

…

unicodedata.c

[3.13] gh-80667: Fix case-sensitivity of some Unicode literal escapes (GH-107281) (GH-144754)

2026-02-12 17:18:48 +00:00

unicodename_db.h

…

winreparse.h

…

xxlimited_35.c

…

xxlimited.c

[3.13] gh-134160: Use PyModuleDef.m_free in the example module xxlimited (GH-135174) (GH-135214)

2025-06-07 11:03:32 +02:00

xxmodule.c

[3.13] gh-122040: reword Modules/xxmodule.c module-level comment (GH-132201) (#132207 )

2025-04-07 08:27:34 +00:00

xxsubtype.c

…

zlibmodule.c

[3.13] gh-116946: fully implement GC protocol for zlib objects (GH-138290) (#138328 )

2025-09-01 12:25:11 +02:00

README

Source files for standard library extension modules,
and former extension modules that are now builtin modules.