From: Victor Stinner <vstinner@python.org>
Date: Wed, 6 Nov 2024 10:59:39 +0000 (+0100)
Subject: gh-126455: Disallow _ssl.SSLSocket instantiation (#126481)
X-Git-Tag: v3.14.0a2~154
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b1c4ffc20573befb4db66bbbdd569b9bd13bb127;p=thirdparty%2FPython%2Fcpython.git

gh-126455: Disallow _ssl.SSLSocket instantiation (#126481)

Prevent creation of incomplete/invalid _ssl.SSLSocket objects when
created directly.
---

diff --git a/Modules/_ssl.c b/Modules/_ssl.c
index 5223e21b5cdb..b6b5ebf094c9 100644
--- a/Modules/_ssl.c
+++ b/Modules/_ssl.c
@@ -2979,7 +2979,7 @@ static PyType_Spec PySSLSocket_spec = {
     .name = "_ssl._SSLSocket",
     .basicsize = sizeof(PySSLSocket),
     .flags = (Py_TPFLAGS_DEFAULT | Py_TPFLAGS_IMMUTABLETYPE |
-              Py_TPFLAGS_HAVE_GC),
+              Py_TPFLAGS_HAVE_GC | Py_TPFLAGS_DISALLOW_INSTANTIATION),
     .slots = PySSLSocket_slots,
 };