-
-
Notifications
You must be signed in to change notification settings - Fork 32.4k
Closed
Labels
3.10only security fixesonly security fixes3.11only security fixesonly security fixes3.12only security fixesonly security fixesOS-windowstopic-argument-clinictype-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or errortype-crashA hard crash of the interpreter, possibly with a core dumpA hard crash of the interpreter, possibly with a core dump
Description
The code generated for the Py_UNICODE converter (and derived converter LPCWSTR) looks like:
const Py_UNICODE *name;
...
if (!_PyArg_ParseXXX(..., name, ...)) {
goto exit;
}
...
exit:
PyMem_Free((void *)name);
If parsing fails, PyMem_Free()
is called for uninitialized variable.
It is the only converter with non-trivial cleanup which does not have a mandatory initializer.
Metadata
Metadata
Assignees
Labels
3.10only security fixesonly security fixes3.11only security fixesonly security fixes3.12only security fixesonly security fixesOS-windowstopic-argument-clinictype-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or errortype-crashA hard crash of the interpreter, possibly with a core dumpA hard crash of the interpreter, possibly with a core dump