Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

gh-142664: fix UAF inmemoryview.__hash__ via re-entrant data's__hash__#143217

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Merged

Conversation

@picnixz
Copy link
Member

@picnixzpicnixz commentedDec 27, 2025•
edited by bedevere-appbot
Loading

@picnixzpicnixz added needs backport to 3.13bugs and security fixes needs backport to 3.14bugs and security fixes labelsDec 27, 2025
@picnixzpicnixzenabled auto-merge (squash)December 27, 2025 12:43
@picnixzpicnixz merged commit00e24b8 intopython:mainDec 27, 2025
46 checks passed
@miss-islington-app
Copy link

Thanks@picnixz for the PR 🌮🎉.. I'm working now to backport this PR to: 3.13, 3.14.
🐍🍒⛏🤖

miss-islington pushed a commit to miss-islington/cpython that referenced this pull requestDec 27, 2025
…'s `__hash__` (pythonGH-143217)(cherry picked from commit00e24b8)Co-authored-by: Bénédikt Tran <10796600+picnixz@users.noreply.github.com>
@miss-islington-app
Copy link

Sorry,@picnixz, I could not cleanly backport this to3.13 due to a conflict.
Please backport usingcherry_picker on command line.

cherry_picker 00e24b80e092e7d36dc189fd260b2a4e730a6e7f 3.13

@bedevere-app
Copy link

GH-143221 is a backport of this pull request to the3.14 branch.

@bedevere-appbedevere-appbot removed the needs backport to 3.14bugs and security fixes labelDec 27, 2025
@picnixzpicnixz deleted the fix/memoryview/uaf-in-hash-142664 branchDecember 27, 2025 13:19
picnixz added a commit to picnixz/cpython that referenced this pull requestDec 27, 2025
…nt data's `__hash__` (pythonGH-143217)(cherry picked from commit00e24b8)Co-authored-by: Bénédikt Tran <10796600+picnixz@users.noreply.github.com>
@bedevere-app
Copy link

GH-143222 is a backport of this pull request to the3.13 branch.

@bedevere-appbedevere-appbot removed the needs backport to 3.13bugs and security fixes labelDec 27, 2025
@bedevere-bot
Copy link

⚠️⚠️⚠️ Buildbot failure⚠️⚠️⚠️

Hi! The buildbotx86 Debian Installed with X 3.x (no tier) has failed when building commit00e24b8.

What do you need to do:

  1. Don't panic.
  2. Checkthe buildbot page in the devguide if you don't know what the buildbots are or how they work.
  3. Go to the page of the buildbot that failed (https://buildbot.python.org/#/builders/1244/builds/7088) and take a look at the build logs.
  4. Check if the failure is related to this commit (00e24b8) or if it is a false positive.
  5. If the failure is related to this commit, please, reflect that on the issue and make a new Pull Request with a fix.

You can take a look at the buildbot page here:

https://buildbot.python.org/#/builders/1244/builds/7088

Summary of the results of the build (if available):

==

Click to see traceback logs
Traceback (most recent call last):  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/contextlib.py"�[0m, line �[35m85�[0m, in �[35minner�[0mreturn func(*args,**kwds)  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/test/_test_multiprocessing.py"�[0m, line �[35m597�[0m, in �[35mtest_interrupt�[0m    exitcode=self._kill_process(multiprocessing.Process.interrupt)  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/contextlib.py"�[0m, line �[35m85�[0m, in �[35minner�[0mreturn func(*args,**kwds)  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/test/_test_multiprocessing.py"�[0m, line �[35m578�[0m, in �[35m_kill_process�[0mself.assertEqual(�[31mjoin�[0m�[1;31m()�[0m,None)                     �[31m~~~~�[0m�[1;31m^^�[0m  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/test/_test_multiprocessing.py"�[0m, line �[35m251�[0m, in �[35m__call__�[0mreturn �[31mself.func�[0m�[1;31m(*args,**kwds)�[0m           �[31m~~~~~~~~~�[0m�[1;31m^^^^^^^^^^^^^^^�[0m  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/multiprocessing/process.py"�[0m, line �[35m156�[0m, in �[35mjoin�[0m    res=self._popen.wait(timeout)  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/multiprocessing/popen_fork.py"�[0m, line �[35m44�[0m, in �[35mwait�[0mreturn �[31mself.poll�[0m�[1;31m(os.WNOHANGif timeout==0.0else0)�[0m           �[31m~~~~~~~~~�[0m�[1;31m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/multiprocessing/popen_fork.py"�[0m, line �[35m28�[0m, in �[35mpoll�[0m    pid, sts= �[31mos.waitpid�[0m�[1;31m(self.pid, flag)�[0m               �[31m~~~~~~~~~~�[0m�[1;31m^^^^^^^^^^^^^^^^�[0m  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/test/_test_multiprocessing.py"�[0m, line �[35m574�[0m, in �[35mhandler�[0mraiseRuntimeError('join took too long:%s'% p)�[1;35mRuntimeError�[0m:�[35mjoin took too long: <Process name='Process-159' pid=20576 parent=19702 started daemon>�[0mTraceback (most recent call last):  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/contextlib.py"�[0m, line �[35m85�[0m, in �[35minner�[0mreturn func(*args,**kwds)  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/test/_test_multiprocessing.py"�[0m, line �[35m597�[0m, in �[35mtest_interrupt�[0m    exitcode=self._kill_process(multiprocessing.Process.interrupt)  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/contextlib.py"�[0m, line �[35m85�[0m, in �[35minner�[0mreturn func(*args,**kwds)  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/test/_test_multiprocessing.py"�[0m, line �[35m578�[0m, in �[35m_kill_process�[0mself.assertEqual(�[31mjoin�[0m�[1;31m()�[0m,None)                     �[31m~~~~�[0m�[1;31m^^�[0m  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/test/_test_multiprocessing.py"�[0m, line �[35m251�[0m, in �[35m__call__�[0mreturn �[31mself.func�[0m�[1;31m(*args,**kwds)�[0m           �[31m~~~~~~~~~�[0m�[1;31m^^^^^^^^^^^^^^^�[0m  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/multiprocessing/process.py"�[0m, line �[35m156�[0m, in �[35mjoin�[0m    res=self._popen.wait(timeout)  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/multiprocessing/popen_fork.py"�[0m, line �[35m44�[0m, in �[35mwait�[0mreturn �[31mself.poll�[0m�[1;31m(os.WNOHANGif timeout==0.0else0)�[0m           �[31m~~~~~~~~~�[0m�[1;31m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/multiprocessing/popen_fork.py"�[0m, line �[35m28�[0m, in �[35mpoll�[0m    pid, sts= �[31mos.waitpid�[0m�[1;31m(self.pid, flag)�[0m               �[31m~~~~~~~~~~�[0m�[1;31m^^^^^^^^^^^^^^^^�[0m  File �[35m"/buildbot/buildarea/3.x.ware-debian-x86.installed/build/target/lib/python3.15/test/_test_multiprocessing.py"�[0m, line �[35m574�[0m, in �[35mhandler�[0mraiseRuntimeError('join took too long:%s'% p)�[1;35mRuntimeError�[0m:�[35mjoin took too long: <Process name='Process-1' pid=9769 parent=9767 started daemon>�[0m

picnixz added a commit that referenced this pull requestDec 27, 2025
…a's `__hash__` (GH-143217) (#143221)gh-142664: fix UAF in `memoryview.__hash__` via re-entrant data's `__hash__` (GH-143217)(cherry picked from commit00e24b8)Co-authored-by: Bénédikt Tran <10796600+picnixz@users.noreply.github.com>
picnixz added a commit that referenced this pull requestDec 27, 2025
picnixz added a commit to picnixz/cpython that referenced this pull requestDec 27, 2025
miss-islington pushed a commit to miss-islington/cpython that referenced this pull requestDec 27, 2025
…ythonGH-143223)(cherry picked from commit84fcdbd)Co-authored-by: Bénédikt Tran <10796600+picnixz@users.noreply.github.com>
miss-islington pushed a commit to miss-islington/cpython that referenced this pull requestDec 27, 2025
…ythonGH-143223)(cherry picked from commit84fcdbd)Co-authored-by: Bénédikt Tran <10796600+picnixz@users.noreply.github.com>
picnixz added a commit that referenced this pull requestDec 27, 2025
…43223) (#143225)gh-142664: fix `PyObject_Hash` invokation postGH-143217 (GH-143223)(cherry picked from commit84fcdbd)Co-authored-by: Bénédikt Tran <10796600+picnixz@users.noreply.github.com>
picnixz added a commit that referenced this pull requestDec 27, 2025
…43223) (#143224)gh-142664: fix `PyObject_Hash` invokation postGH-143217 (GH-143223)(cherry picked from commit84fcdbd)Co-authored-by: Bénédikt Tran <10796600+picnixz@users.noreply.github.com>
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment

Reviewers

No reviews

Assignees

@picnixzpicnixz

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@picnixz@bedevere-bot
[8]ページ先頭
©2009-2026 Movatter.jp