Skip to content

gh-142783: Fix use-after-free vulnerability in zoneinfo module #142786

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
fatelei wants to merge 48 commits into from
Closed

gh-142783: Fix use-after-free vulnerability in zoneinfo module #142786

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
48 commits
Select commit Hold shift + click to select a range
f133a52
gh-142783: Fix use-after-free vulnerability in zoneinfo module
fatelei Dec 16, 2025
e3f6b7f
fix: fix windows missing ModuleNotFoundError: No module named 'tzdata…
fatelei Dec 16, 2025
69bceb6
fix: fix windows ci failed
fatelei Dec 16, 2025
088d555
chore: update catch exception
fatelei Dec 16, 2025
bee9e30
fix: in windows ci skip test test_weak_cache_descriptor_use_after_free
fatelei Dec 16, 2025
6d7c0bd
chore: remove unused import
fatelei Dec 16, 2025
773fe23
gh-142554: avoid `divmod` crashes due to bad `_pylong.int_divmod` (#1…
picnixz Dec 14, 2025
5889480
gh-142451: correctly copy HMAC attributes in `HMAC.copy()` (#142510)
picnixz Dec 14, 2025
8203fe0
gh-134584: Eliminate redundant refcounting from `_CALL_STR_1` (GH-136…
Zheaoli Dec 14, 2025
ff48e57
gh-142666: Remove unused variable package in import logic (GH-142667)
hyongtao-code Dec 14, 2025
49d1671
gh-141938: document treatment of `OSError` raised by `HTTPConnection.…
picnixz Dec 14, 2025
bcd8259
gh-134584: Eliminate redundant refcounting from `_CALL_BUILTION_O` (G…
AndPuQing Dec 14, 2025
d9f3c60
gh-127930: use explicit imports in tkinter.simpledialog (#127931)
tungol Dec 14, 2025
66632c6
gh-140189: Revert "Temporarily allow CI failures for iOS (#142365)" (…
hugovk Dec 14, 2025
be87007
gh-142681: Improve unicodedata tests (GH-142682)
serhiy-storchaka Dec 14, 2025
42ee429
gh-134584: Eliminate redundant refcounting from _STORE_SUBSCR_LIST_IN…
corona10 Dec 14, 2025
91f5dfe
gh-76007: `pydoc`: Catch `DeprecationWarning` for stdlib module `__ve…
StanFromIreland Dec 14, 2025
5da657a
gh-138122: Add some screenshots to the profiling.sampling docs (#142676)
pablogsal Dec 14, 2025
0afc85b
gh-106318: Add examples for str.isnumeric() (#142680)
adorilson Dec 14, 2025
a45c9a2
Use threading.Event rather than boolean flag. (gh-142722)
nascheme Dec 14, 2025
3412045
gh-142724: fix error path in `_PyPegen_raise_tokenizer_init_error` (#…
AZero13 Dec 14, 2025
460c423
gh-132657: Use stronger memory ordering for so->mask. (gh-142735)
nascheme Dec 15, 2025
4c53c12
gh-141081: Add a `.gitignore` file to `__pycache__` folders (#141162)
StanFromIreland Dec 15, 2025
60022ae
gh-140414: streamline thread state access in `asyncio` (#142742)
kumaraditya303 Dec 15, 2025
c9229be
gh-76007: Deprecate `__version__` attribute in `ctypes` (#142679)
hugovk Dec 15, 2025
e63c16b
gh-142651: make `Mock.call_count` thread-safe (#142656)
chaope Dec 15, 2025
7ca6d17
gh-139871: Optimize bytearray construction with encoding (#142243)
cmaloney Dec 15, 2025
7065a82
gh-138122: Add --subprocesses flag to profile child processes in tach…
pablogsal Dec 15, 2025
7dfa26c
gh-142029: Raise `ModuleNotFoundError` instead of crashing on nonexsi…
dr-carlos Dec 15, 2025
aa94cb6
gh-142217: Recommend PyUnicode_InternFromString() to replace _PyUnico…
vstinner Dec 15, 2025
48bcca5
gh-142594: fix by property calls io.TextIOWrapper.detach (GH-142706)
yihong0618 Dec 15, 2025
3ce68b3
gh-142020: ctypes docs: Note that find_library relies on the programs…
encukou Dec 15, 2025
e19a8ed
Move doc on structure from devguide to `InternalDocs` (GH-142237)
StanFromIreland Dec 15, 2025
9981061
gh-142466: Pixi package definitions for downstream use (#142469)
lucascolley Dec 15, 2025
9d42a14
gh-134584: Eliminate redundant refcounting from _CALL_LIST_APPEND (GH…
Zheaoli Dec 15, 2025
e0d98a3
gh-134584: Eliminate redundant refcounting from _STORE_SUBSCR_DICT (G…
corona10 Dec 15, 2025
cc4a25a
gh-142472: Clean-up _PyStackRef functions (gh-142479)
colesbury Dec 15, 2025
fc8d4b3
gh-116738: Make _bz2 module thread-safe (gh-142756)
yoney Dec 15, 2025
57d59de
GH-142718: JIT: Fix crash due to incorrect caching on side exits when…
markshannon Dec 15, 2025
1bff0b6
gh-141081: Revert "Add a `.gitignore` file to `__pycache__` folders (…
hugovk Dec 15, 2025
dc77837
gh-134584: Remove custom float decref ops (GH-142576)
Fidget-Spinner Dec 15, 2025
0638a82
gh-134584: Eliminate redundant refcounting from `_STORE_ATTR_INSTANCE…
Zheaoli Dec 15, 2025
b5cbbaa
Add Fidget-Spinner to more JIT CODEOWNERS (GH-142768)
Fidget-Spinner Dec 15, 2025
92581c6
gh-85222: Document the global start method side effect in multiproces…
aisk Dec 15, 2025
69c4e3e
gh-134584: JIT: Eliminate redundant refcount ops for X_INT (GH-142765)
Fidget-Spinner Dec 15, 2025
63ba8e6
gh-142737: Handle lost `io.open` in `_Py_FindSourceFile` (GH-142747)
johnslavik Dec 15, 2025
08420fb
GH-134584: Remove redundant refcount from `_STORE_ATTR_SLOT` (#142729)
savannahostrowski Dec 15, 2025
2f2204e
gh-142595: Amend be5e0dcdedb (fix NULL pointer dereference) (GH-142775)
skirpichev Dec 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .gitattributes
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -68,6 +68,7 @@ PCbuild/readme.txt dos
**/clinic/*.cpp.h generated
**/clinic/*.h.h generated
*_db.h generated
Doc/_static/tachyon-example-*.html generated
Doc/c-api/lifecycle.dot.svg generated
Doc/data/stable_abi.dat generated
Doc/library/token-list.inc generated
Expand Down
4 changes: 2 additions & 2 deletions .github/CODEOWNERS
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -289,10 +289,10 @@ Tools/jit/ @brandtbucher @savannahostrowski @diegorusso
InternalDocs/jit.md @brandtbucher @savannahostrowski @diegorusso @AA-Turner

# Micro-op / μop / Tier 2 Optimiser
Python/optimizer.c @markshannon
Python/optimizer.c @markshannon @Fidget-Spinner
Python/optimizer_analysis.c @markshannon @tomasr8 @Fidget-Spinner
Python/optimizer_bytecodes.c @markshannon @tomasr8 @Fidget-Spinner
Python/optimizer_symbols.c @markshannon @tomasr8
Python/optimizer_symbols.c @markshannon @tomasr8 @Fidget-Spinner

# Parser, Lexer, and Grammar
Grammar/python.gram @pablogsal @lysnikolaou
Expand Down
1 change: 0 additions & 1 deletion .github/workflows/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -706,7 +706,6 @@ jobs:
uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe
with:
allowed-failures: >-
build-ios,
build-windows-msi,
build-ubuntu-ssltests-awslc,
build-ubuntu-ssltests-openssl,
Expand Down
1 change: 1 addition & 0 deletions .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,7 @@ gmon.out
.pytest_cache/
.ruff_cache/
.DS_Store
.pixi/

*.exe

Expand Down
3,260 changes: 3,260 additions & 0 deletions Doc/_static/tachyon-example-flamegraph.html
View file
Open in desktop

Large diffs are not rendered by default.

Loading
Loading