New submission from Zackery Spytz <[email protected]>:
Commit cb90c89de14aab636739b3e810cf949e47b54a0c added a PyMem_FREE(tok->buf) call in tok_nextc() if a PyMem_REALLOC() call fails. This will cause a double free when PyTokenizer_Free() is called on the tokenizer state. ---------- components: Interpreter Core messages: 339013 nosy: ZackerySpytz priority: normal severity: normal status: open title: A possible double PyMem_FREE() due to tokenizer.c's tok_nextc() type: crash versions: Python 2.7, Python 3.7, Python 3.8 _______________________________________ Python tracker <[email protected]> <https://bugs.python.org/issue36459> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
