[issue32734] Asyncio Lock safety issue (unlimited acquire)

Yury Selivanov added the comment: Thank you, Bar! Looking forward to see more contributions to asyncio from you! -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker

[issue32734] Asyncio Lock safety issue (unlimited acquire)

Yury Selivanov added the comment: New changeset 7e4cf8e95d2971ae0d5fb417152183070184293f by Yury Selivanov (Bar Harel) in branch '3.6': [3.6] bpo-32734: Fix asyncio.Lock multiple acquire safety issue (GH-5466) (#5502) https://github.com/python/cpython/commit/7e4cf8e95d2971ae0d5fb4171521830701

[issue32734] Asyncio Lock safety issue (unlimited acquire)

Yury Selivanov added the comment: New changeset 2b5937ec0ae88cd0b4cc0c8534f21c435ee94662 by Yury Selivanov (Miss Islington (bot)) in branch '3.7': bpo-32734: Fix asyncio.Lock multiple acquire safety issue (GH-5466) (#5501) https://github.com/python/cpython/commit/2b5937ec0ae88cd0b4cc0c8534f21c

[issue32734] Asyncio Lock safety issue (unlimited acquire)

Change by Bar Harel : -- pull_requests: +5335 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyt

[issue32734] Asyncio Lock safety issue (unlimited acquire)

Change by miss-islington : -- pull_requests: +5334 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mai

[issue32734] Asyncio Lock safety issue (unlimited acquire)

Yury Selivanov added the comment: New changeset 2f79c014931cbb23b08a7d16c534a3cc9607ae14 by Yury Selivanov (Bar Harel) in branch 'master': bpo-32734: Fix asyncio.Lock multiple acquire safety issue (GH-5466) https://github.com/python/cpython/commit/2f79c014931cbb23b08a7d16c534a3cc9607ae14 ---

[issue32734] Asyncio Lock safety issue (unlimited acquire)

Change by Bar Harel : -- status: open -> pending ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.

[issue32734] Asyncio Lock safety issue (unlimited acquire)

Bar Harel added the comment: Finished fixing CR and adding backports. -- ___ Python tracker ___ ___ Python-bugs-list mailing list Un

[issue32734] Asyncio Lock safety issue (unlimited acquire)

Change by Bar Harel : -- pull_requests: +5309 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyt

[issue32734] Asyncio Lock safety issue (unlimited acquire)

Change by Bar Harel : -- pull_requests: +5306 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyt

[issue32734] Asyncio Lock safety issue (unlimited acquire)

Change by Bar Harel : -- pull_requests: +5305 ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyt

[issue32734] Asyncio Lock safety issue (unlimited acquire)

Bar Harel added the comment: Alright. Fixed, added tests, news and acks. Besides PR5466, we'll need another one for the 3.6 branch. -- ___ Python tracker ___ __

[issue32734] Asyncio Lock safety issue (unlimited acquire)

Change by Bar Harel : -- keywords: +patch pull_requests: +5292 stage: needs patch -> patch review ___ Python tracker ___ ___ Python-b

[issue32734] Asyncio Lock safety issue (unlimited acquire)

Change by Yury Selivanov : -- priority: normal -> high stage: -> needs patch type: security -> behavior versions: -Python 3.4, Python 3.5 ___ Python tracker ___ __

[issue32734] Asyncio Lock safety issue (unlimited acquire)

New submission from Bar Harel : Hey guys, I found a pretty dangerous bug that allows acquiring locks in asyncio without them being free. This happens due to double release (calling _wake_up_first) from both release and acquire in case of cancellation. The example I've uploaded exploits it by