Stefan Behnel added the comment:

There are calls to PyObject_RichCompareBool() in the loops, which means that 
user code might get executed. What if that's evil code that modifies the heap 
list? Couldn't that lead to list resizing and thus invalidation of the list 
item pointer?

----------
nosy: +scoder

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue24221>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to