gh-142783: Fix use-after-free vulnerability in zoneinfo module - #142786

Closed

fatelei wants to merge 48 commits into

python:mainfrom

fatelei:issue-142783

Commits on Dec 16, 2025

gh-142783: Fix use-after-free vulnerability in zoneinfo module
fatelei
committed
f133a52
fix: fix windows missing ModuleNotFoundError: No module named 'tzdata.zoneinfo'; 'tzdata' is not a package
fatelei
committed
e3f6b7f
fix: fix windows ci failed
fatelei
committed
69bceb6
chore: update catch exception
fatelei
committed
088d555
fix: in windows ci skip test test_weak_cache_descriptor_use_after_free
fatelei
committed
bee9e30
chore: remove unused import
fatelei
committed
6d7c0bd
gh-142554: avoid `divmod` crashes due to bad `_pylong.int_divmod` (#142673)
picnixz
authored and
fatelei
committed
773fe23
gh-142451: correctly copy HMAC attributes in `HMAC.copy()` (#142510)
picnixz
authored and
fatelei
committed
5889480
gh-134584: Eliminate redundant refcounting from `_CALL_STR_1` (GH-136070)
Zheaoli
authored and
fatelei
committed
8203fe0
gh-142666: Remove unused variable package in import logic (GH-142667)
hyongtao-code
authored and
fatelei
committed
ff48e57
gh-141938: document treatment of `OSError` raised by `HTTPConnection.getresponse` (#142339)
picnixz
authored and
fatelei
committed
49d1671
gh-134584: Eliminate redundant refcounting from `_CALL_BUILTION_O` (GH-142695)
authored and
fatelei
committed
bcd8259
gh-127930: use explicit imports in tkinter.simpledialog (#127931)
authored and
fatelei
committed
d9f3c60
gh-140189: Revert "Temporarily allow CI failures for iOS (#142365)" (#142660)
hugovk
authored and
fatelei
committed
66632c6
gh-142681: Improve unicodedata tests (GH-142682)
serhiy-storchaka
authored and
fatelei
committed
be87007
gh-134584: Eliminate redundant refcounting from _STORE_SUBSCR_LIST_INT (gh-142703)
corona10
authored and
fatelei
committed
42ee429
gh-76007: `pydoc`: Catch `DeprecationWarning` for stdlib module `__version__` attributes (#139997)
StanFromIreland
authored and
fatelei
committed
91f5dfe
gh-138122: Add some screenshots to the profiling.sampling docs (#142676)
authored and
fatelei
committed
5da657a
gh-106318: Add examples for str.isnumeric() (#142680)
authored and
fatelei
committed
0afc85b
Use threading.Event rather than boolean flag. (gh-142722)
nascheme
authored and
fatelei
committed
a45c9a2
gh-142724: fix error path in `_PyPegen_raise_tokenizer_init_error` (#142725)
AZero13
authored and
fatelei
committed
3412045
gh-132657: Use stronger memory ordering for so->mask. (gh-142735)
nascheme
authored and
fatelei
committed
460c423
gh-141081: Add a `.gitignore` file to `__pycache__` folders (#141162)
authored and
fatelei
committed
4c53c12
gh-140414: streamline thread state access in `asyncio` (#142742)
kumaraditya303
authored and
fatelei
committed
60022ae
gh-76007: Deprecate `__version__` attribute in `ctypes` (#142679)
hugovk
authored and
fatelei
committed
c9229be
gh-142651: make `Mock.call_count` thread-safe (#142656)
chaope
authored and
fatelei
committed
e63c16b
gh-139871: Optimize bytearray construction with encoding (#142243)
cmaloney
authored and
fatelei
committed
7ca6d17
gh-138122: Add --subprocesses flag to profile child processes in tachyon (#142636)
pablogsal
authored and
fatelei
committed
7065a82
gh-142029: Raise `ModuleNotFoundError` instead of crashing on nonexsistent module name given to `create_builtin()` (#142054)
authored and
fatelei
committed
7dfa26c
gh-142217: Recommend PyUnicode_InternFromString() to replace _PyUnicode_FromId() (GH-142746)
vstinner
authored and
fatelei
committed
aa94cb6
gh-142594: fix by property calls io.TextIOWrapper.detach (GH-142706)
yihong0618
authored and
fatelei
committed
48bcca5
gh-142020: ctypes docs: Note that find_library relies on the programs it runs (GH-142134)
encukou
authored and
fatelei
committed
3ce68b3
Move doc on structure from devguide to `InternalDocs` (GH-142237)
authored and
fatelei
committed
e19a8ed
gh-142466: Pixi package definitions for downstream use (#142469)
authored and
fatelei
committed
9981061
gh-134584: Eliminate redundant refcounting from _CALL_LIST_APPEND (GH-142711)
authored and
fatelei
committed
9d42a14
gh-134584: Eliminate redundant refcounting from _STORE_SUBSCR_DICT (GH-142712)
authored and
fatelei
committed
e0d98a3
gh-142472: Clean-up _PyStackRef functions (gh-142479)
colesbury
authored and
fatelei
committed
cc4a25a
gh-116738: Make _bz2 module thread-safe (gh-142756)
yoney
authored and
fatelei
committed
fc8d4b3
GH-142718: JIT: Fix crash due to incorrect caching on side exits when exiting jitted code. (GH-142762)
markshannon
authored and
fatelei
committed
57d59de
gh-141081: Revert "Add a `.gitignore` file to `__pycache__` folders (#141162)" (#142758)
hugovk
authored and
fatelei
committed
1bff0b6
gh-134584: Remove custom float decref ops (GH-142576)
Fidget-Spinner
authored and
fatelei
committed
dc77837
gh-134584: Eliminate redundant refcounting from `_STORE_ATTR_INSTANCE_VALUE` (GH-142759)
Zheaoli
authored and
fatelei
committed
0638a82
Add Fidget-Spinner to more JIT CODEOWNERS (GH-142768)
Fidget-Spinner
authored and
fatelei
committed
b5cbbaa
gh-85222: Document the global start method side effect in multiprocessing (GH-136426)
authored and
fatelei
committed
92581c6
gh-134584: JIT: Eliminate redundant refcount ops for X_INT (GH-142765)
Fidget-Spinner
authored and
fatelei
committed
69c4e3e
gh-142737: Handle lost `io.open` in `_Py_FindSourceFile` (GH-142747)
johnslavik
authored and
fatelei
committed
63ba8e6
GH-134584: Remove redundant refcount from `_STORE_ATTR_SLOT` (#142729)
savannahostrowski
authored and
fatelei
committed
08420fb
gh-142595: Amend be5e0dcdedb (fix NULL pointer dereference) (GH-142775)
skirpichev
authored and
fatelei
committed
2f2204e