Issue 42713: Segmentation fault in running eval() with large expression size.

➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

This issue has been migrated to GitHub: https://github.com/python/cpython/issues/86879

classification

Title:	Segmentation fault in running eval() with large expression size.
Type:	crash	Stage:	resolved
Components:	Interpreter Core	Versions:	Python 3.10, Python 3.9, Python 3.8, Python 3.7

process

Status:	closed	Resolution:	duplicate
Dependencies:		Superseder:	Segmentation fault in running ast.literal_eval() with large expression size. View: 42712
Assigned To:		Nosy List:	xxm
Priority:	normal	Keywords:

Created on 2020-12-22 10:18 by xxm, last changed 2022-04-11 14:59 by admin. This issue is now closed.

Messages (1)
msg383578 - (view)	Author: Xinmeng Xia (xxm)	Date: 2020-12-22 10:18
Calling function eval() with large size can cause a segmentation fault in Python 3.7 -3.10. Please check the following two examples. The example 1 works as expected, while the second one triggers segmentation fault on Python 3.7,3.8,3.9,3.10. The primary difference between these two examples lay on the value of "n". Example 1: ========================================= mylist = [] n = 100000 print(eval("mylist"+"+mylist"n)) ========================================== The actual output: Recursion Error on Python 3.5-3.10 (as expected) Example 2: =================================== mylist = [] n = 1000000 print(eval("mylist"+"+mylist"n)) =================================== The actual output: Recursive Error on Python 3.5, 3.6 (as expected), segmentation fault on Python 3.7, 3.8, 3.9, 3.10 (not as expected) My system information: >> python3.10 -V Python 3.10.0a2 >> python3.9 -V Python 3.9.0rc1 >> python3.8 -V Python 3.8.0 >> python3.7 -V Python 3.7.3 >> python3.6 -V Python 3.6.12 >> uname -v #73~16.04.1-Ubuntu

msg383578 - (view)

Author: Xinmeng Xia (xxm)

Date: 2020-12-22 10:18

Calling function eval() with large size can cause a segmentation fault in Python 3.7 -3.10. Please check the following two examples. The example 1 works as expected, while the second one triggers segmentation fault on Python 3.7,3.8,3.9,3.10. The primary difference between these two examples lay on the value of "n".

Example 1:
=========================================
mylist = []
n = 100000
print(eval("mylist"+"+mylist"*n))
==========================================

The actual output: Recursion Error on Python 3.5-3.10 (as expected)




Example 2:
===================================
mylist = []
n = 1000000
print(eval("mylist"+"+mylist"*n))
===================================

The actual output: Recursive Error on Python 3.5, 3.6 (as expected),  segmentation fault on Python 3.7, 3.8, 3.9, 3.10 (not as expected)



My system information:

>> python3.10 -V
Python 3.10.0a2

>> python3.9 -V
Python 3.9.0rc1

>> python3.8 -V
Python 3.8.0

>> python3.7 -V
Python 3.7.3

>> python3.6 -V
Python 3.6.12

>> uname -v
#73~16.04.1-Ubuntu

History
Date	User	Action	Args
2022-04-11 14:59:39	admin	set	github: 86879
2020-12-26 01:41:57	terry.reedy	set	status: open -> closed superseder: Segmentation fault in running ast.literal_eval() with large expression size. resolution: duplicate stage: resolved
2020-12-22 10:18:43	xxm	create