[issue27195] Crash when RawIOBase.write(b) evaluates b.format

[Cheryl Sabella]

Change by Cheryl Sabella :


--
resolution:  -> wont fix
stage: patch review -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue27195] Crash when RawIOBase.write(b) evaluates b.format

[Roundup Robot]

Change by Roundup Robot :


--
pull_requests: +9015

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue27195] Crash when RawIOBase.write(b) evaluates b.format

[Karthikeyan Singaravelan]

Change by Karthikeyan Singaravelan :


--
nosy: +xtreak

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue27195] Crash when RawIOBase.write(b) evaluates b.format

[Stefan Krah]

Stefan Krah  added the comment:

PyBUF_RECORDS pulls in PyBUF_STRIDES, which should IMO not be done in a stable 
release.

Maybe (PyBUF_CONTIG_RO|PyBUF_FORMAT), but I'm uneasy even about that. The 
potential for breakage is huge.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue27195] Crash when RawIOBase.write(b) evaluates b.format

[Zackery Spytz]

Zackery Spytz  added the comment:

Ping.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue27195] Crash when RawIOBase.write(b) evaluates b.format

[Zackery Spytz]

Change by Zackery Spytz :


--
nosy: +ZackerySpytz

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue27195] Crash when RawIOBase.write(b) evaluates b.format

[Zackery Spytz]

Change by Zackery Spytz :


--
keywords: +patch
pull_requests: +7941
stage:  -> patch review

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue27195] Crash when RawIOBase.write(b) evaluates b.format

[Serhiy Storchaka]

Changes by Serhiy Storchaka :


--
nosy: +benjamin.peterson, pitrou, serhiy.storchaka, skrah, stutzbach

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue27195] Crash when RawIOBase.write(b) evaluates b.format

[Martin Panter]

New submission from Martin Panter:

$ gdb --args ./python -c '
import io
class R(io.RawIOBase):
def writable(self): return True
def write(self, b):
print("About to evaluate {!r}.format".format(b))
b.format
print("Never reached")
   
b = io.BufferedWriter(R())
b.write(b"x")
b.flush()
'
[. . .]
(gdb) run
[. . .]
About to evaluate .format
python: Objects/stringobject.c:120: PyString_FromString: Assertion `str != 
NULL' failed.

Program received signal SIGABRT, Aborted.
0x771422a8 in raise () from /usr/lib/libc.so.6
(gdb) bt full
#0  0x771422a8 in raise () from /usr/lib/libc.so.6
No symbol table info available.
#1  0x7714372a in abort () from /usr/lib/libc.so.6
No symbol table info available.
#2  0x7713b1b7 in __assert_fail_base () from /usr/lib/libc.so.6
No symbol table info available.
#3  0x7713b262 in __assert_fail () from /usr/lib/libc.so.6
No symbol table info available.
#4  0x0046f7b8 in PyString_FromString (str=0x0)
at Objects/stringobject.c:120
size = 0
op = 0x77f9d160
__PRETTY_FUNCTION__ = "PyString_FromString"
#5  0x00562fec in memory_format_get (self=0x76ee4380)
at Objects/memoryobject.c:330
No locals.
#6  0x005587d5 in getset_get (descr=0x77fb93a8, 
obj=0x76ee4380, type=0x81da40 )
at Objects/descrobject.c:146
res = 0x77fb5580
#7  0x004611e6 in _PyObject_GenericGetAttrWithDict (
obj=0x76ee4380, name=0x77f9d160, dict=0x0) at Objects/object.c:1399
tp = 0x81da40 
descr = 0x77fb93a8
res = 0x0
f = 0x55876a 
dictoffset = 8675760
dictptr = 0xf74ab600
__PRETTY_FUNCTION__ = "_PyObject_GenericGetAttrWithDict"
#8  0x0046164a in PyObject_GenericGetAttr (obj=0x76ee4380, 
name=0x77f9d160) at Objects/object.c:1461
No locals.
#9  0x00460ab0 in PyObject_GetAttr (v=0x76ee4380, 
name=0x77f9d160) at Objects/object.c:1196
tp = 0x81da40 
#10 0x004d0dae in PyEval_EvalFrameEx (f=0x77e31c00, throwflag=0)
at Python/ceval.c:2541
[. . .]
#16 0x00421b0e in PyObject_CallMethodObjArgs (callable=0x77e601e0, 
name=0x77fc3820) at Objects/abstract.c:2751
args = 0x76cb94c0
tmp = 0x76ee4350
vargs = {{gp_offset = 24, fp_offset = 48, 
overflow_arg_area = 0x7fffddb0, 
reg_save_area = 0x7fffdcf0}}
#17 0x76a83283 in _bufferedwriter_raw_write (self=0x76ee1318, 
start=0x8ff710 "x", '\313' , ..., len=1) at 
/media/disk/home/proj/python/cpython/Modules/_io/bufferedio.c:1726
buf = {buf = 0x8ff710, obj = 0x0, len = 1, itemsize = 1, readonly = 1, 
  ndim = 1, format = 0x0, shape = 0x7fffdde0, strides = 0x0, 
  suboffsets = 0x0, smalltable = {9432288, 140737488346688}, 
  internal = 0x0}
memobj = 0x76ee4380
res = 0x7fffde60
n = 5605226
errnum = 0
#18 0x76a8360d in _bufferedwriter_flush_unlocked (self=0x76ee1318)
at /media/disk/home/proj/python/cpython/Modules/_io/bufferedio.c:1773
written = 0
n = 1
rewind = 0
#19 0x76a7faf6 in buffered_flush_and_rewind_unlocked (
self=0x76ee1318)
at /media/disk/home/proj/python/cpython/Modules/_io/bufferedio.c:756
res = 0x77fc8700
#20 0x76a7fd52 in buffered_flush (self=0x76ee1318, args=0x0)
at /media/disk/home/proj/python/cpython/Modules/_io/bufferedio.c:783
res = 0x76ee1318
#21 0x004d824c in call_function (pp_stack=0x7fffe078, oparg=0)
at Python/ceval.c:4334
meth = 0x76a7fc4f 
self = 0x76ee1318
flags = 4
tstate = 0x8461b0
na = 0
nk = 0
n = 0
pfunc = 0x77f151e8
func = 0x76cb86f0
x = 0x76ee1318
w = 0x77f151e8
[. . .]

--
components: IO
messages: 267038
nosy: martin.panter
priority: normal
severity: normal
status: open
title: Crash when RawIOBase.write(b) evaluates b.format
type: crash
versions: Python 2.7

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com