Bugs item #1697916, was opened at 2007-04-10 19:47
Message generated for change (Comment added) made by gbrandl
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=105470&aid=1697916&group_id=5470

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Python Interpreter Core
Group: Python 2.5
Status: Open
Resolution: None
Priority: 6
Private: No
Submitted By: STINNER Victor (haypo)
Assigned to: Raymond Hettinger (rhettinger)
Summary: Segfaults on memory error

Initial Comment:
Hi, I'm playing with resource.setrlimit(resource.RLIMIT_AS) to limit memory 
usage during fuzzing tests. It works quite well but Python crashs sometimes 
(with SEGFAULT).

I downloaded Python source code and recompiled it with EXTRA_FLAGS="-g -O0" to 
find errors. I found three bugs and wrote a patch for all of them.

Comments:
* Objects/exceptions.c:33: allocation may returns NULL on memory error
* Objects/longobject.c:2511: long_divrem() may allocate new long integers but 
l_divmod() doesn't check that div and mod are not NULL
* Objects/object.c:1284: problem with NULL mro. I don't understand how mro 
works, but I think that the error may be catched when mro is assigned. Problem: 
where is it done? in Objects/typeobject.c?

So don't apply my patch directly: fix for object.c may be wrong.

----------------------------------------------------------------------

>Comment By: Georg Brandl (gbrandl)
Date: 2007-04-11 16:11

Message:
Logged In: YES 
user_id=849994
Originator: NO

Status update: Fixed the first two bugs locally, and a third one
discovered by Victor on #python-dev.

The mro one is unclear -- we've asked him to reproduce it and poke around
in gdb to see why tp_mro is NULL, which it shouldn't be.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=105470&aid=1697916&group_id=5470
_______________________________________________
Python-bugs-list mailing list 
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to