From c3157480601499565fd42a8afbdb0207328ac484 Mon Sep 17 00:00:00 2001
From: VanshAgarwal24036 <148854295+VanshAgarwal24036@users.noreply.github.com>
Date: Mon, 12 Jan 2026 21:09:32 +0530
Subject: [PATCH] gh-143544: Fix possible use-after-free in the JSON decoder
 when JSONDecodeError disappears during raising it (#143561)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf8
Content-Transfer-Encoding: 8bit

Co-authored-by: Bénédikt Tran <10796600+picnixz@users.noreply.github.com>
---
 Modules/_json.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Modules/_json.c b/Modules/_json.c
index 14714d4b3465..78a85496575a 100644
--- a/Modules/_json.c
+++ b/Modules/_json.c
@@ -423,11 +423,12 @@ raise_errmsg(const char *msg, PyObject *s, Py_ssize_t end)
 
     PyObject *exc;
     exc = PyObject_CallFunction(JSONDecodeError, "zOn", msg, s, end);
-    Py_DECREF(JSONDecodeError);
     if (exc) {
         PyErr_SetObject(JSONDecodeError, exc);
         Py_DECREF(exc);
     }
+
+    Py_DECREF(JSONDecodeError);
 }
 
 static void
-- 
2.47.3