[Python-checkins] [3.11] GH-97752: Clear the previous member of newly-created generator/coroutine frames (GH-97812)

brandtbucher webhook-mailer at python.org
Tue Oct 4 00:03:43 EDT 2022


https://github.com/python/cpython/commit/4591dae421cc1415bcf982cccbf5de4f787df030
commit: 4591dae421cc1415bcf982cccbf5de4f787df030
branch: 3.11
author: Miss Islington (bot) <31488909+miss-islington at users.noreply.github.com>
committer: brandtbucher <brandtbucher at gmail.com>
date: 2022-10-03T21:03:26-07:00
summary:

[3.11] GH-97752: Clear the previous member of newly-created generator/coroutine frames (GH-97812)

(cherry picked from commit 93fcc1f4133e177882850177c2c047d46019b812)

files:
A Misc/NEWS.d/next/Core and Builtins/2022-10-03-13-35-48.gh-issue-97752.0xTjJY.rst
M Lib/test/test_generators.py
M Python/frame.c

diff --git a/Lib/test/test_generators.py b/Lib/test/test_generators.py
index e5aa7da1e0df..353073dbfce0 100644
--- a/Lib/test/test_generators.py
+++ b/Lib/test/test_generators.py
@@ -206,6 +206,25 @@ def __del__(self):
         finally:
             gc.set_threshold(*thresholds)
 
+    def test_ag_frame_f_back(self):
+        async def f():
+            yield
+        ag = f()
+        self.assertIsNone(ag.ag_frame.f_back)
+
+    def test_cr_frame_f_back(self):
+        async def f():
+            pass
+        cr = f()
+        self.assertIsNone(cr.cr_frame.f_back)
+        cr.close()  # Suppress RuntimeWarning.
+
+    def test_gi_frame_f_back(self):
+        def f():
+            yield
+        gi = f()
+        self.assertIsNone(gi.gi_frame.f_back)
+
 
 
 class ExceptionTest(unittest.TestCase):
diff --git a/Misc/NEWS.d/next/Core and Builtins/2022-10-03-13-35-48.gh-issue-97752.0xTjJY.rst b/Misc/NEWS.d/next/Core and Builtins/2022-10-03-13-35-48.gh-issue-97752.0xTjJY.rst
new file mode 100644
index 000000000000..c65635070348
--- /dev/null
+++ b/Misc/NEWS.d/next/Core and Builtins/2022-10-03-13-35-48.gh-issue-97752.0xTjJY.rst	
@@ -0,0 +1,2 @@
+Fix possible data corruption or crashes when accessing the ``f_back`` member
+of newly-created generator or coroutine frames.
diff --git a/Python/frame.c b/Python/frame.c
index c4e93492e081..45072da04269 100644
--- a/Python/frame.c
+++ b/Python/frame.c
@@ -52,6 +52,9 @@ _PyFrame_Copy(_PyInterpreterFrame *src, _PyInterpreterFrame *dest)
     assert(src->stacktop >= src->f_code->co_nlocalsplus);
     Py_ssize_t size = ((char*)&src->localsplus[src->stacktop]) - (char *)src;
     memcpy(dest, src, size);
+    // Don't leave a dangling pointer to the old frame when creating generators
+    // and coroutines:
+    dest->previous = NULL;
 }
 
 



More information about the Python-checkins mailing list