Repository navigation

gh-142783: Fix use-after-free vulnerability in zoneinfo module - #142786

Closed

fatelei wants to merge 48 commits into

python:mainfrom

fatelei:issue-142783

Closed

gh-142783: Fix use-after-free vulnerability in zoneinfo module#142786
fatelei wants to merge 48 commits into
python:mainfrom
fatelei:issue-142783

Commits on Dec 16, 2025
- gh-142783: Fix use-after-free vulnerability in zoneinfo module
  fatelei
  committed
  f133a52
- fix: fix windows missing ModuleNotFoundError: No module named 'tzdata.zoneinfo'; 'tzdata' is not a package
  fatelei
  committed
  e3f6b7f
- fix: fix windows ci failed
  fatelei
  committed
  69bceb6
- chore: update catch exception
  fatelei
  committed
  088d555
- fix: in windows ci skip test test_weak_cache_descriptor_use_after_free
  fatelei
  committed
  bee9e30
- chore: remove unused import
  fatelei
  committed
  6d7c0bd
- gh-142554: avoid `divmod` crashes due to bad `_pylong.int_divmod` (#142673)
  
  picnixz
  authored and
  fatelei
  committed
  773fe23
- gh-142451: correctly copy HMAC attributes in `HMAC.copy()` (#142510)
  
  picnixz
  authored and
  fatelei
  committed
  5889480
- gh-134584: Eliminate redundant refcounting from `_CALL_STR_1` (GH-136070)
  
  Zheaoli
  authored and
  fatelei
  committed
  8203fe0
- gh-142666: Remove unused variable package in import logic (GH-142667)
  
  hyongtao-code
  authored and
  fatelei
  committed
  ff48e57
- gh-141938: document treatment of `OSError` raised by `HTTPConnection.getresponse` (#142339)
  
  picnixz
  authored and
  fatelei
  committed
  49d1671
- gh-134584: Eliminate redundant refcounting from `_CALL_BUILTION_O` (GH-142695)
  
  authored and
  fatelei
  committed
  bcd8259
- gh-127930: use explicit imports in tkinter.simpledialog (#127931)
  
  authored and
  fatelei
  committed
  d9f3c60
- gh-140189: Revert "Temporarily allow CI failures for iOS (#142365)" (#142660)
  
  hugovk
  authored and
  fatelei
  committed
  66632c6
- gh-142681: Improve unicodedata tests (GH-142682)
  
  serhiy-storchaka
  authored and
  fatelei
  committed
  be87007
- gh-134584: Eliminate redundant refcounting from _STORE_SUBSCR_LIST_INT (gh-142703)
  
  corona10
  authored and
  fatelei
  committed
  42ee429
- gh-76007: `pydoc`: Catch `DeprecationWarning` for stdlib module `__version__` attributes (#139997)
  
  StanFromIreland
  authored and
  fatelei
  committed
  91f5dfe
- gh-138122: Add some screenshots to the profiling.sampling docs (#142676)
  
  authored and
  fatelei
  committed
  5da657a
- gh-106318: Add examples for str.isnumeric() (#142680)
  
  authored and
  fatelei
  committed
  0afc85b
- Use threading.Event rather than boolean flag. (gh-142722)
  
  nascheme
  authored and
  fatelei
  committed
  a45c9a2
- gh-142724: fix error path in `_PyPegen_raise_tokenizer_init_error` (#142725)
  
  AZero13
  authored and
  fatelei
  committed
  3412045
- gh-132657: Use stronger memory ordering for so->mask. (gh-142735)
  
  nascheme
  authored and
  fatelei
  committed
  460c423
- gh-141081: Add a `.gitignore` file to `__pycache__` folders (#141162)
  
  authored and
  fatelei
  committed
  4c53c12
- gh-140414: streamline thread state access in `asyncio` (#142742)
  
  kumaraditya303
  authored and
  fatelei
  committed
  60022ae
- gh-76007: Deprecate `__version__` attribute in `ctypes` (#142679)
  
  hugovk
  authored and
  fatelei
  committed
  c9229be
- gh-142651: make `Mock.call_count` thread-safe (#142656)
  
  chaope
  authored and
  fatelei
  committed
  e63c16b
- gh-139871: Optimize bytearray construction with encoding (#142243)
  
  cmaloney
  authored and
  fatelei
  committed
  7ca6d17
- gh-138122: Add --subprocesses flag to profile child processes in tachyon (#142636)
  
  pablogsal
  authored and
  fatelei
  committed
  7065a82
- gh-142029: Raise `ModuleNotFoundError` instead of crashing on nonexsistent module name given to `create_builtin()` (#142054)
  
  authored and
  fatelei
  committed
  7dfa26c
- gh-142217: Recommend PyUnicode_InternFromString() to replace _PyUnicode_FromId() (GH-142746)
  
  vstinner
  authored and
  fatelei
  committed
  aa94cb6
- gh-142594: fix by property calls io.TextIOWrapper.detach (GH-142706)
  
  yihong0618
  authored and
  fatelei
  committed
  48bcca5
- gh-142020: ctypes docs: Note that find_library relies on the programs it runs (GH-142134)
  
  encukou
  authored and
  fatelei
  committed
  3ce68b3
- Move doc on structure from devguide to `InternalDocs` (GH-142237)
  
  authored and
  fatelei
  committed
  e19a8ed
- gh-142466: Pixi package definitions for downstream use (#142469)
  
  authored and
  fatelei
  committed
  9981061
- gh-134584: Eliminate redundant refcounting from _CALL_LIST_APPEND (GH-142711)
  
  authored and
  fatelei
  committed
  9d42a14
- gh-134584: Eliminate redundant refcounting from _STORE_SUBSCR_DICT (GH-142712)
  
  authored and
  fatelei
  committed
  e0d98a3
- gh-142472: Clean-up _PyStackRef functions (gh-142479)
  
  colesbury
  authored and
  fatelei
  committed
  cc4a25a
- gh-116738: Make _bz2 module thread-safe (gh-142756)
  
  yoney
  authored and
  fatelei
  committed
  fc8d4b3
- GH-142718: JIT: Fix crash due to incorrect caching on side exits when exiting jitted code. (GH-142762)
  
  markshannon
  authored and
  fatelei
  committed
  57d59de
- gh-141081: Revert "Add a `.gitignore` file to `__pycache__` folders (#141162)" (#142758)
  
  hugovk
  authored and
  fatelei
  committed
  1bff0b6
- gh-134584: Remove custom float decref ops (GH-142576)
  
  Fidget-Spinner
  authored and
  fatelei
  committed
  dc77837
- gh-134584: Eliminate redundant refcounting from `_STORE_ATTR_INSTANCE_VALUE` (GH-142759)
  
  Zheaoli
  authored and
  fatelei
  committed
  0638a82
- Add Fidget-Spinner to more JIT CODEOWNERS (GH-142768)
  
  Fidget-Spinner
  authored and
  fatelei
  committed
  b5cbbaa
- gh-85222: Document the global start method side effect in multiprocessing (GH-136426)
  
  authored and
  fatelei
  committed
  92581c6
- gh-134584: JIT: Eliminate redundant refcount ops for X_INT (GH-142765)
  
  Fidget-Spinner
  authored and
  fatelei
  committed
  69c4e3e
- gh-142737: Handle lost `io.open` in `_Py_FindSourceFile` (GH-142747)
  
  johnslavik
  authored and
  fatelei
  committed
  63ba8e6
- GH-134584: Remove redundant refcount from `_STORE_ATTR_SLOT` (#142729)
  
  savannahostrowski
  authored and
  fatelei
  committed
  08420fb
- gh-142595: Amend be5e0dcdedb (fix NULL pointer dereference) (GH-142775)
  
  skirpichev
  authored and
  fatelei
  committed
  2f2204e

Commits

Commits on Dec 16, 2025