[issue28963] Use-after-free in _asyncio_Future_remove_done_callback() of _asynciomodule.c

[Yury Selivanov]

Yury Selivanov added the comment:

Inada-san, thanks for the review. You're right, we need to fix another edge-case.  I'll upload a new patch tomorrow.

Victor, fourth option we should go with is to commit the attached patch (with Inada-san review comment fixed).

I guess it's up to Ned if he want to cherry-pick the patch to Python 3.6.  I agree that the bug is very unlikely to appear in any real-world code.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue28963>
_______________________________________