Skip to content

gh-92930: _pickle.c: Acquire strong references before calling save() #92931

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
sweeneyde merged 11 commits into from
Jun 11, 2022
Merged

gh-92930: _pickle.c: Acquire strong references before calling save() #92931

Changes from 1 commit
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
9b70755
Acquire strong references after PyDict_Next
sweeneyde May 18, 2022
7af44c4
simplify test
sweeneyde May 18, 2022
802a220
📜🤖 Added by blurb_it.
blurb-it[bot] May 18, 2022
a2a8e35
INCREF before save() in batch_list_exact
sweeneyde Jun 10, 2022
58ad6a2
Merge branch 'main' into picklecrasher
sweeneyde Jun 10, 2022
e48b31d
Add INCREF/DECREF for save_set
sweeneyde Jun 10, 2022
72b3dd5
Merge branch 'picklecrasher' of https://github.com/sweeneyde/cpython …
sweeneyde Jun 10, 2022
7b8f697
More tests
sweeneyde Jun 10, 2022
7133c2c
Check non-singleton set
sweeneyde Jun 10, 2022
a939d16
Update Misc/NEWS.d/next/Core and Builtins/2022-05-18-18-34-45.gh-issu…
sweeneyde Jun 10, 2022
370c44e
clean up test case, better name
sweeneyde Jun 11, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
clean up test case, better name
  • Loading branch information
@sweeneyde
sweeneyde committed Jun 11, 2022
commit 370c44e650f01b2138e32590be7cbc271793b140
19 changes: 11 additions & 8 deletions Lib/test/pickletester.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3036,6 +3036,7 @@ def check_array(arr):
check_array(arr[::2])

def test_evil_class_mutating_dict(self):
# https://github.com/python/cpython/issues/92930
from random import getrandbits

global Bad
Expand Down Expand Up @@ -3064,25 +3065,27 @@ def __reduce__(self):
expected = "changed size during iteration"
self.assertIn(expected, str(e))

def test_evil_class_mutating_container(self):
def test_evil_pickler_mutating_collection(self):
# https://github.com/python/cpython/issues/92930
if not hasattr(self, "pickler"):
raise self.skipTest(f"{type(self)} has no associated pickler type")

global Clearer
class Clearer:
pass

def check(a):
class P(self.pickler):
def check(collection):
class EvilPickler(self.pickler):
def persistent_id(self, obj):
if isinstance(obj, Clearer):
a.clear()
collection.clear()
return None
pickler = EvilPickler(io.BytesIO(), proto)
try:
P(io.BytesIO(), proto).dump(a)
except RuntimeError:
# Don't care if this raises, just don't segfault.
pass
pickler.dump(collection)
except RuntimeError as e:
expected = "changed size during iteration"
self.assertIn(expected, str(e))

for proto in protocols:
check([Clearer()])
Expand Down