gh-143308: fix UAF when PickleBuffer is concurrently mutated in a callback#143312

Merged

picnixz merged 13 commits into

python:mainfrom

a12k:fix-picklebuffer-uaf

Jan 3, 2026

Commits on Dec 31, 2025

Fix Use-After-Free in _pickle by incrementing PickleBuffer exports

Aaron Wieczorek
authored and
Aaron Wieczorek
committed
Remove trailing whitespace in test_pickle.py

Aaron Wieczorek
authored and
Aaron Wieczorek
committed
Edit NEWS.d with better description of changes

Aaron Wieczorek
authored and
Aaron Wieczorek
committed
Refactor and migrate tests from test_pickle to pickletester

Aaron Wieczorek
authored and
Aaron Wieczorek
committed
Add back deleted space between functions

Aaron Wieczorek
authored and
Aaron Wieczorek
committed
Slight refactoring of tests; simplifying some logic

Aaron Wieczorek
authored and
Aaron Wieczorek
committed
Hardcoding pickle.HIGHEST_PROTOCOL in test

Aaron Wieczorek
authored and
Aaron Wieczorek
committed
Hardcoding pickle.HIGHEST_PROTOCOL in test slightly cleaner

Aaron Wieczorek
authored and
Aaron Wieczorek
committed
Add clickable issue ref to comment

a12k
and
picnixz
authored
Merge branch 'python:main' into fix-picklebuffer-uaf
a12k
authored
Move NEWS entry for issue 143308 from Core_and_Builtins to Library section
a12k
authored

Commits on Jan 3, 2026

Refactor save_picklebuffer to use PyObject_GetBuffer on PickleBuffer directly

Aaron Wieczorek
authored and
Aaron Wieczorek
committed
A couple minor line alignments

Aaron Wieczorek
authored and
Aaron Wieczorek
committed