-
-
Notifications
You must be signed in to change notification settings - Fork 32.2k
gh-135561: ensure that the GIL is held when handling an HACL* error in _hmac
#135562
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
I'm leaving in 15 mins, but I hope we can make it for the next beta release (tomorrow). This bug is not really an issue as it should never happen in practice (if it happens, then there is something fundamentally wrong) |
!buildbot FIPS only |
🤖 New build scheduled with the buildbot fleet by @picnixz for commit aea6888 🤖 Results will be shown at: https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F135562%2Fmerge The command will test the builders whose names match following regular expression: The builders matched are:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM.
@ZeroIntensity: Are you ok with this fix?
assert(PyGILState_GetThisThreadState() != NULL); | ||
if (code == Hacl_Streaming_Types_Success) { | ||
return 0; | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
} | |
} | |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah, this looks good to me.
It's a bug that I discovered in #135267 but I'll first patch 3.14 and main.
cc @ZeroIntensity
_hmac
: GIL may be released while attempting to set an exception #135561