_ssl.c uses PyWeakref_GetObject but doesn't incref result

[pitrou]

BPO	8682
Nosy	@pitrou, @giampaolo
Files	sslweakref.patch

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = 'https://github.com/pitrou'
closed_at = <Date 2010-06-24.23:00:17.072>
created_at = <Date 2010-05-10.23:32:10.246>
labels = ['extension-modules', 'type-crash']
title = "_ssl.c uses PyWeakref_GetObject but doesn't incref result"
updated_at = <Date 2010-06-24.23:00:17.071>
user = 'https://github.com/pitrou'

bugs.python.org fields:

activity = <Date 2010-06-24.23:00:17.071>
actor = 'pitrou'
assignee = 'pitrou'
closed = True
closed_date = <Date 2010-06-24.23:00:17.072>
closer = 'pitrou'
components = ['Extension Modules']
creation = <Date 2010-05-10.23:32:10.246>
creator = 'pitrou'
dependencies = []
files = ['17761']
hgrepos = []
issue_num = 8682
keywords = ['patch']
message_count = 3.0
messages = ['105481', '108526', '108560']
nosy_count = 4.0
nosy_names = ['exarkun', 'janssen', 'pitrou', 'giampaolo.rodola']
pr_nums = []
priority = 'normal'
resolution = 'fixed'
stage = 'resolved'
status = 'closed'
superseder = None
type = 'crash'
url = 'https://bugs.python.org/issue8682'
versions = ['Python 3.1', 'Python 3.2']

[pitrou]

PyWeakref_GetObject() returns a borrowed reference, which can therefore become invalid at any time (especially when the GIL gets released). This provides a way to crash the interpreter deliberately.
The returned reference should be incref'ed immediately before any other action is taken.

[pitrou]

Here is a patch. Will commit soon if there's no remarks.

[pitrou]

Committed in r82204 (py3k) and r82205 (3.1).