-
- Notifications
You must be signed in to change notification settings - Fork 33.6k
Closed
Labels
3.10only security fixesonly security fixes3.11only security fixesonly security fixes3.12only security fixesonly security fixesOS-windowstopic-argument-clinictype-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or errortype-crashA hard crash of the interpreter, possibly with a core dumpA hard crash of the interpreter, possibly with a core dump
Description
The code generated for the Py_UNICODE converter (and derived converter LPCWSTR) looks like:
const Py_UNICODE *name; ... if (!_PyArg_ParseXXX(..., name, ...)) { goto exit; } ... exit: PyMem_Free((void *)name);If parsing fails, PyMem_Free() is called for uninitialized variable.
It is the only converter with non-trivial cleanup which does not have a mandatory initializer.
Metadata
Metadata
Assignees
Labels
3.10only security fixesonly security fixes3.11only security fixesonly security fixes3.12only security fixesonly security fixesOS-windowstopic-argument-clinictype-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or errortype-crashA hard crash of the interpreter, possibly with a core dumpA hard crash of the interpreter, possibly with a core dump