[issue31095] Checking all tp_dealloc with Py_TPFLAGS_HAVE_GC

STINNER Victor report at bugs.python.org
Tue Aug 22 18:56:48 EDT 2017


STINNER Victor added the comment:

In my experience, it's not that hard to crash CPython (without ctypes) if you know internals or just if you look into Lib/test/crashers/ :-)

I agree that it's a good practice to fix crashes when there is a simple known script to crash Python. The question is more where is the limit between security and bug fixes.

To be honest, the change is very safe and is very short.

@Larry: It's up to you, you are the release manager :-)

If we consider that the discussed bugs impact the security, I will ask for backports to 2.7, 3.3 and 3.4 as well.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue31095>
_______________________________________


More information about the Python-bugs-list mailing list