Issue 24104: Use after free in xmlparser_setevents (2) (original) (raw)

Issue24104

Created on 2015-05-01 14:15 by pkt, last changed 2022-04-11 14:58 by admin. This issue is now closed.

Files
File name Uploaded Description Edit
poc_xml_setevents2.py pkt,2015-05-01 14:15
Messages (5)
msg242321 - (view) Author: paul (pkt) Date: 2015-05-01 14:15
# Program received signal SIGSEGV, Segmentation fault. # 0x4068565c in xmlparser_setevents (self=0x4064b13c, args=([], [<S2 at remote 0x4064b0e4>])) # at /home/p/Python-3.4.1/Modules/_elementtree.c:3562 # 3562 if (PyUnicode_Check(event_name_obj)) { # (gdb) print *event_name_obj # $6 = {_ob_next = 0xdbdbdbdb, _ob_prev = 0xdbdbdbdb, ob_refcnt = -606348325, ob_type = 0xdbdbdbdb} # # # "event_name_obj" is deleted inside a custom destructor. Use after free.
msg242839 - (view) Author: Alex LordThorsen (Alex.LordThorsen) * Date: 2015-05-09 20:37
../cpython/python.exe test_xmlparser_setevents.py __del__ 1 __del__ 3 Segmentation fault: 11 Confirmation on 3.5.0a4 Python 3.5.0a4+
msg246067 - (view) Author: paul (pkt) Date: 2015-07-02 10:26
ping
msg246146 - (view) Author: paul (pkt) Date: 2015-07-03 07:45
ping
msg257389 - (view) Author: Martin Panter (martin.panter) * (Python committer) Date: 2016-01-03 00:40
Serhiy, you mentioned your Issue 24103 patch also fixes this. Should we close this one now as well, or is there more to do?
History
Date User Action Args
2022-04-11 14:58:16 admin set github: 68292
2016-01-03 06:22:14 serhiy.storchaka set status: open -> closedsuperseder: Use after free in xmlparser_setevents (1)resolution: duplicatestage: needs patch -> resolved
2016-01-03 00:40:37 martin.panter set nosy: + martin.pantermessages: +
2015-07-03 07:45:54 pkt set messages: +
2015-07-02 10:26:31 pkt set messages: +
2015-05-09 20:37:25 Alex.LordThorsen set nosy: + Alex.LordThorsenmessages: +
2015-05-03 06:55:25 Arfrever set nosy: + Arfrever
2015-05-02 04:53:31 serhiy.storchaka set nosy: + serhiy.storchakacomponents: + XML
2015-05-01 14🔞37 christian.heimes set nosy: + christian.heimesstage: needs patchcomponents: + Extension Modulesversions: + Python 3.5
2015-05-01 14:15:42 pkt create