[issue44719] Incorrect callable object crashes Python 3.11.0a0

[Dennis Sweeney]

Dennis Sweeney  added the comment:

Indeed, I got no crash on main after GH-27313.

I also got no crash on 3.10 after GH-23568. Its backport to 3.9 (GH-24501) 
would have fixed this, but broke the stable ABI and was reverted. This was 
related to bpo-42500.

I'm closing this "fixed". Feel free to re-open if you still see an issue.

--
resolution:  -> fixed
stage:  -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44719] Incorrect callable object crashes Python 3.11.0a0

[Dennis Sweeney]

Dennis Sweeney  added the comment:

I think GH-27313 will fix this

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44719] Incorrect callable object crashes Python 3.11.0a0

[Dennis Sweeney]

Dennis Sweeney  added the comment:

### Simplified crasher

from weakref import ref

def f():
ref(lambda: 0, [])
f()

f()




Running this in debug mode, I got a failed assertion at traceback.c,
line 746, `assert(source_line);`. 
If that assertion is commented out, a null pointer is dereferenced in
_PyPegen_byte_offset_to_character_offset()

--
nosy: +Dennis Sweeney

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue44719] Incorrect callable object crashes Python 3.11.0a0

[Xinmeng Xia]

New submission from Xinmeng Xia :

This program can trigger "Aborted (core dumped)" on Python 3.9.0, Python 3.8.0, 
Python3.10.0a2.  It trigger " segmentation fault" on the master (Python 
3.11.0a0).

==
import weakref

class Object:
def __init__(self, arg):
self.arg = arg

def test_set_callback_attribute():
x = Object(1)
callback = lambda ref: None
callback = weakref.ref(callback, x)
with test_set_callback_attribute():
pass

test_set_callback_attribute()
==

Crashes on the master (Python 3.11.0a0)

.
Traceback (most recent call last):
  File 
"/home/xxm/Desktop/IFuzzer/bugs/CPython/IFuzzer/test_weakref/test_set_callback_attribute__1.py",
 line 26, in test_set_callback_attribute
callback = weakref.ref(callback, x)

TypeError: 'Object' object is not callable
Exception ignored in: <__main__.Object object at 0x7f3e2d56ca90>
Traceback (most recent call last):
  File 
"/home/xxm/Desktop/IFuzzer/bugs/CPython/IFuzzer/test_weakref/test_set_callback_attribute__1.py",
 line 26, in test_set_callback_attribute
Segmentation fault (core dumped)
--


Crashes on the older version of Python
---
File 
"/home/xxm/Desktop/IFuzzer/bugs/CPython/IFuzzer/test_weakref/test_set_callback_attribute__1.py",
 line 27 in test_set_callback_attribute
File 
"/home/xxm/Desktop/IFuzzer/bugs/CPython/IFuzzer/test_weakref/test_set_callback_attribute__1.py",
 line 27 in test_set_callback_attribute
File 
"/home/xxm/Desktop/IFuzzer/bugs/CPython/IFuzzer/test_weakref/test_set_callback_attribute__1.py",
 line 27 in test_set_callback_attribute
File 
"/home/xxm/Desktop/IFuzzer/bugs/CPython/IFuzzer/test_weakref/test_set_callback_attribute__1.py",
 line 27 in test_set_callback_attribute
File 
"/home/xxm/Desktop/IFuzzer/bugs/CPython/IFuzzer/test_weakref/test_set_callback_attribute__1.py",
 line 27 in test_set_callback_attribute
File 
"/home/xxm/Desktop/IFuzzer/bugs/CPython/IFuzzer/test_weakref/test_set_callback_attribute__1.py",
 line 27 in test_set_callback_attribute
File 
"/home/xxm/Desktop/IFuzzer/bugs/CPython/IFuzzer/test_weakref/test_set_callback_attribute__1.py",
 line 27 in test_set_callback_attribute
...
Aborted (core dumped)
---

System: Ubuntu 16.04

--
components: Interpreter Core
messages: 398028
nosy: xxm
priority: normal
severity: normal
status: open
title: Incorrect callable object crashes Python 3.11.0a0
type: crash
versions: Python 3.11

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com