[issue24096] Use after free in get_filter

[Christian Heimes]

Christian Heimes added the comment:

In 3.5 the segfault occurs at

#0  0x00007ffff073e55e in encoder_listencode_dict (s=s at entry=0x7ffff09aa988, acc=acc at entry=0x7fffffffcf20, dct=dct at entry=<D at remote 0x7ffff094b958>, indent_level=indent_level at entry=0)
    at /home/heimes/dev/python/cpython/Modules/_json.c:1686
#1  0x00007ffff073ee85 in encoder_listencode_obj (s=s at entry=0x7ffff09aa988, acc=acc at entry=0x7fffffffcf20, obj=<D at remote 0x7ffff094b958>, indent_level=0) at /home/heimes/dev/python/cpython/Modules/_json.c:1561
#2  0x00007ffff073f392 in encoder_call (self=<_json.Encoder at remote 0x7ffff09aa988>, args=(<D at remote 0x7ffff094b958>, 0), kwds=0x0) at /home/heimes/dev/python/cpython/Modules/_json.c:1386
#3  0x000000000044edf8 in PyObject_Call (func=func at entry=<_json.Encoder at remote 0x7ffff09aa988>, arg=arg at entry=(<D at remote 0x7ffff094b958>, 0), kw=kw at entry=0x0) at Objects/abstract.c:2147
#4  0x000000000052be56 in do_call (func=func at entry=<_json.Encoder at remote 0x7ffff09aa988>, pp_stack=pp_stack at entry=0x7fffffffd098, na=na at entry=2, nk=nk at entry=0) at Python/ceval.c:4515
#5  0x000000000053663c in call_function (pp_stack=pp_stack at entry=0x7fffffffd098, oparg=oparg at entry=2) at Python/ceval.c:4311

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue24096>
_______________________________________