[New-bugs-announce] [issue29044] Use after free in string '%c' formater

[Xiang Zhang]

New submission from Xiang Zhang:

In string %c formater(formatchar), when receiving an integer-like objects, the return value is decrefed immediately before use.

----------
components: Interpreter Core
files: use-after-free.patch
keywords: patch
messages: 283811
nosy: haypo, xiang.zhang
priority: normal
severity: normal
stage: patch review
status: open
title: Use after free in string '%c' formater
type: behavior
versions: Python 3.5, Python 3.6, Python 3.7
Added file: http://bugs.python.org/file45996/use-after-free.patch

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue29044>
_______________________________________