[issue24091] Use after free in Element.extend (1)

2015-05-19 Thread Serhiy Storchaka
Changes by Serhiy Storchaka : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___ _

[issue24091] Use after free in Element.extend (1)

2015-05-18 Thread Roundup Robot
Roundup Robot added the comment: New changeset 34523e53a342 by Serhiy Storchaka in branch '2.7': Issue #24091: Fixed various crashes in corner cases in cElementTree. https://hg.python.org/cpython/rev/34523e53a342 New changeset 157c4afca186 by Serhiy Storchaka in branch '3.4': Issue #24091: Fixed

[issue24091] Use after free in Element.extend (1)

2015-05-02 Thread Arfrever Frehtes Taifersar Arahesis
Changes by Arfrever Frehtes Taifersar Arahesis : -- nosy: +Arfrever ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscri

[issue24091] Use after free in Element.extend (1)

2015-05-02 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: Here is a patch that fixes issue24091, issue24092, issue24093, and several other similar bugs. -- assignee: -> serhiy.storchaka keywords: +patch stage: -> patch review versions: +Python 3.5 Added file: http://bugs.python.org/file39270/etree_crashes.

[issue24091] Use after free in Element.extend (1)

2015-05-01 Thread Christian Heimes
Changes by Christian Heimes : -- nosy: +christian.heimes ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https:

[issue24091] Use after free in Element.extend (1)

2015-05-01 Thread Serhiy Storchaka
Changes by Serhiy Storchaka : -- components: +Extension Modules, XML nosy: +eli.bendersky, scoder, serhiy.storchaka ___ Python tracker ___ ___

[issue24091] Use after free in Element.extend (1)

2015-05-01 Thread paul
New submission from paul: # 1055for (i = 0; i < seqlen; i++) { # (gdb) n # 1056PyObject* element = PySequence_Fast_GET_ITEM(seq, i); # (gdb) n # 1057if (!PyObject_IsInstance(element, (PyObject *)&Element_Type)) { # (gdb) print *element # $19 = {_ob_next = 0x4060e6