[issue24103] Use after free in xmlparser_setevents (1)

Roundup Robot added the comment: New changeset deda5b5160d2 by Serhiy Storchaka in branch '2.7': Issue #24103: Fixed possible use after free in ElementTree.iterparse(). https://hg.python.org/cpython/rev/deda5b5160d2 New changeset ed62cf0cf256 by Serhiy Storchaka in branch '3.5': Issue #24103: Fi

[issue24103] Use after free in xmlparser_setevents (1)

Changes by Serhiy Storchaka : -- dependencies: -Use the Py_SETREF macro resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___ _

[issue24103] Use after free in xmlparser_setevents (1)

Serhiy Storchaka added the comment: Proposed patch fixes both this issue and issue24104. With the special macro proposed in issue20440 it can be better. -- assignee: -> serhiy.storchaka keywords: +patch stage: needs patch -> patch review versions: +Python 3.6 -Python 3.4 Added file: h

[issue24103] Use after free in xmlparser_setevents (1)

Changes by Serhiy Storchaka : -- dependencies: +Use Py_REPLACE/Py_XREPLACE macros ___ Python tracker ___ ___ Python-bugs-list mailing

[issue24103] Use after free in xmlparser_setevents (1)

paul added the comment: ping -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman

[issue24103] Use after free in xmlparser_setevents (1)

paul added the comment: ping -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman

[issue24103] Use after free in xmlparser_setevents (1)

Changes by Arfrever Frehtes Taifersar Arahesis : -- nosy: +Arfrever ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscri

[issue24103] Use after free in xmlparser_setevents (1)

Changes by Serhiy Storchaka : -- components: +XML nosy: +christian.heimes, serhiy.storchaka ___ Python tracker ___ ___ Python-bugs-lis

[issue24103] Use after free in xmlparser_setevents (1)

Changes by Christian Heimes : -- components: +Extension Modules stage: -> needs patch versions: +Python 3.5 ___ Python tracker ___ __

[issue24103] Use after free in xmlparser_setevents (1)

New submission from paul: # xmlparser_setevents(XMLParserObject *self, PyObject* args) # { # ... # /* clear out existing events */ # Py_CLEAR(target->start_event_obj); # 1 Py_CLEAR(target->end_event_obj); # Py_CLEAR(target->start_ns_event_obj); # Py_CLEAR(target->end_ns_even