Skip to content

atexit.unregister() can remove wrong callback #142881

@serhiy-storchaka

Description

@serhiy-storchaka

Bug report

atexit.unregister() can call the user __eq__() when it searches the callback(s) to remove. If __eq__() returns true, the callback is removed by index. But __eq__() can call arbitrary code, it can release the GIL, and atexit.unregister() can be called in other thread. If it removes the callback at the current index or before current index, the current index will no point to the compared callable, and the following deletion will delete wrong callable.

This issue is similar to #112127, but causes different symptoms.

Linked PRs

Metadata

Metadata

Labels

3.13bugs and security fixes3.14bugs and security fixes3.15new features, bugs and security fixesextension-modulesC modules in the Modules dirtype-bugAn unexpected behavior, bug, or error

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions