From: Benjamin Peterson <benjamin@python.org>
Date: Mon, 5 Sep 2016 17:39:57 +0000 (-0700)
Subject: clear out f_gen during generator finalization (closes #27812)
X-Git-Tag: v3.6.0b1~472^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=bdddb11b0efd438696b5fa3e75f323248c22af7d;p=thirdparty%2FPython%2Fcpython.git

clear out f_gen during generator finalization (closes #27812)

Patch from Armin Rigo.
---

diff --git a/Misc/NEWS b/Misc/NEWS
index 8558db4df378..4b1899938d1f 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -10,6 +10,9 @@ Release date: TBA
 Core and Builtins
 -----------------
 
+- Issue #27812: Properly clear out a generator's frame's backreference to the
+  generator to prevent crashes in frame.clear().
+
 - Issue #27811: Fix a crash when a coroutine that has not been awaited is
   finalized with warnings-as-errors enabled.
 
diff --git a/Objects/genobject.c b/Objects/genobject.c
index a9ea5c247869..01c59c24a968 100644
--- a/Objects/genobject.c
+++ b/Objects/genobject.c
@@ -71,7 +71,10 @@ gen_dealloc(PyGenObject *gen)
         return;                     /* resurrected.  :( */
 
     _PyObject_GC_UNTRACK(self);
-    Py_CLEAR(gen->gi_frame);
+    if (gen->gi_frame != NULL) {
+        gen->gi_frame->f_gen = NULL;
+        Py_CLEAR(gen->gi_frame);
+    }
     Py_CLEAR(gen->gi_code);
     Py_CLEAR(gen->gi_name);
     Py_CLEAR(gen->gi_qualname);