Author scoder
Recipients scoder
Date 2008-05-28.11:07:14
SpamBayes Score 0.158108
Marked as misclassified No
Message-id <1211972838.31.0.400694776413.issue2990@psf.upfronthosting.co.za>
In-reply-to
Content
Similar to the "decref before set" issue solved by Py_CLEAR(), the code
in typeobject.c calls DECREF in the middle of a cache update. This
leaves one cache entry in an invalid state during the DECREF call, which
might result in running cleanup code in this state. If this code depends
on an attribute lookup, this might lead to a cache lookup, which in turn
can access the infected part of the cache. In the worst case, such a
scenario can lead to a crash as it accesses an already cleaned-up object.

Here is a patch that fixes this.
History
Date User Action Args
2008-05-28 11:07:18scodersetspambayes_score: 0.158108 -> 0.158108
recipients: + scoder
2008-05-28 11:07:18scodersetspambayes_score: 0.158108 -> 0.158108
messageid: <1211972838.31.0.400694776413.issue2990@psf.upfronthosting.co.za>
2008-05-28 11:07:16scoderlinkissue2990 messages
2008-05-28 11:07:15scodercreate