From: Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Date: Wed, 5 Mar 2025 01:41:29 +0000 (+0100)
Subject: [3.13] gh-130547: Fix race between dict_dealloc and split_keys_entry_added (gh-130778... 
X-Git-Tag: v3.13.3~166
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=ffef9b0440e4391cbad69dbb11716f54cb8539ab;p=thirdparty%2FPython%2Fcpython.git

[3.13] gh-130547: Fix race between dict_dealloc and split_keys_entry_added (gh-130778) (gh-130833)

gh-130547: Fix race between dict_dealloc and split_keys_entry_added (gh-130778)
(cherry picked from commit 80e6d3ec4972220587c8b883161311a49ea8d0ff)

Co-authored-by: Donghee Na <donghee.na@python.org>
---

diff --git a/Objects/dictobject.c b/Objects/dictobject.c
index f947b44b039e..fd8453c5d996 100644
--- a/Objects/dictobject.c
+++ b/Objects/dictobject.c
@@ -3167,7 +3167,7 @@ dict_dealloc(PyObject *self)
     Py_TRASHCAN_BEGIN(mp, dict_dealloc)
     if (values != NULL) {
         if (values->embedded == 0) {
-            for (i = 0, n = mp->ma_keys->dk_nentries; i < n; i++) {
+            for (i = 0, n = values->capacity; i < n; i++) {
                 Py_XDECREF(values->values[i]);
             }
             free_values(values, false);