]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
projects / thirdparty / Python / cpython.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6aa88a2) | patch
gh-126037: fix UAF in `xml.etree.ElementTree.Element.find*` when concurrent mutation...
authorBénédikt Tran <10796600+picnixz@users.noreply.github.com>
Mon, 31 Mar 2025 10:26:52 +0000 (12:26 +0200)
committerGitHub <noreply@github.com>
Mon, 31 Mar 2025 10:26:52 +0000 (12:26 +0200)
commitc57623c221d46daeaedfbf2b32d041fde0c882de
tree03f280bef7563abca0c6d0be1fe25878a7476a75tree | snapshot
parent6aa88a2cb36240fe2b587f2e82043873270a27cfcommit | diff
gh-126037:  fix UAF in `xml.etree.ElementTree.Element.find*` when concurrent mutations happen (#127964)

We fix a use-after-free in the `find`, `findtext` and `findall` methods of `xml.etree.ElementTree.Element`
objects that can be triggered when the tag to find implements an `__eq__` method that mutates the
element being queried.
Lib/test/test_xml_etree.py diff | blob | blame | history
Misc/NEWS.d/next/Library/2024-12-15-15-07-22.gh-issue-126037.OyA7JP.rst [new file with mode: 0644] blob
Modules/_elementtree.c diff | blob | blame | history
Mirror of https://github.com/python/cpython.git