gh-92888: Fix memoryview bad `__index__` use after free by Fidget-Spinner · Pull Request #92946 · python/cpython
Co-Authored-By: chilaxan <35645806+chilaxan@users.noreply.github.com>
Co-Authored-By: Serhiy Storchaka <3659035+serhiy-storchaka@users.noreply.github.com>
Co-Authored-By: Serhiy Storchaka <3659035+serhiy-storchaka@users.noreply.github.com>
| { | ||
| CHECK_RELEASED_INT(self); /* See gh-92888 for why we need this here */ |
| @@ -0,0 +1,2 @@ | |||
| Fix ``memoryview`` use after free when accessing the backing buffer in certain cases. | |||
| def release(): | ||
| m.release() | ||
| nonlocal ba | ||
| ba = bytearray(size) |
| return True | ||
|
|
||
| ba = None | ||
| m = memoryview(bytearray(b'\xff'*size)) |
| ba = None | ||
| m = memoryview(bytearray(b'\xff'*size)) | ||
| with self.assertRaises(ValueError): | ||
| m[MyIndex()] |
| m = memoryview(bytearray(b'\xff'*size)) | ||
| with self.assertRaises(ValueError): | ||
| m[MyIndex()] | ||
|
|
||
| ba = None |