[3.12] gh-126455: Disallow _ssl.SSLSocket instantiation (GH-126481) (#126487)

gh-126455: Disallow _ssl.SSLSocket instantiation (GH-126481)

Prevent creation of incomplete/invalid _ssl.SSLSocket objects when
created directly.
(cherry picked from commit b1c4ffc20573befb4db66bbbdd569b9bd13bb127)

Co-authored-by: Victor Stinner <vstinner@python.org>

diff --git a/Modules/_ssl.c b/Modules/_ssl.c
index 35e4ce7af50fc69ccff64ae18b95dc955b4c2f88..7a9f2c87239eca3698c61616f9c1131d23beea6f 100644 (file)
--- a/Modules/_ssl.c
+++ b/Modules/_ssl.c
@@ -2900,7 +2900,7 @@ static PyType_Spec PySSLSocket_spec = {
     .name = "_ssl._SSLSocket",
     .basicsize = sizeof(PySSLSocket),
     .flags = (Py_TPFLAGS_DEFAULT | Py_TPFLAGS_IMMUTABLETYPE |
-              Py_TPFLAGS_HAVE_GC),
+              Py_TPFLAGS_HAVE_GC | Py_TPFLAGS_DISALLOW_INSTANTIATION),
     .slots = PySSLSocket_slots,
 };