From e66552c807702ca08190ef51e30906e78ac0ca60 Mon Sep 17 00:00:00 2001 From: AN Long Date: Thu, 26 Mar 2026 00:22:10 +0800 Subject: [PATCH 1/3] Fix use-after-free when clearing interpreter's queue items --- Modules/_interpqueuesmodule.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/Modules/_interpqueuesmodule.c b/Modules/_interpqueuesmodule.c index 777b6854749884..c5591f3f35b531 100644 --- a/Modules/_interpqueuesmodule.c +++ b/Modules/_interpqueuesmodule.c @@ -763,6 +763,9 @@ _queue_clear_interpreter(_queue *queue, int64_t interpid) else { prev->next = next; } + if (next == NULL) { + queue->items.last = prev; + } queue->items.count -= 1; } else { From 0fee2ab18d3b99928e0094dc18ae8e2bd0d76dca Mon Sep 17 00:00:00 2001 From: "blurb-it[bot]" <43283697+blurb-it[bot]@users.noreply.github.com> Date: Wed, 25 Mar 2026 16:45:39 +0000 Subject: [PATCH 2/3] =?UTF-8?q?=F0=9F=93=9C=F0=9F=A4=96=20Added=20by=20blu?= =?UTF-8?q?rb=5Fit.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../2026-03-25-16-45-31.gh-issue-146427.sbxyZO.rst | 1 + 1 file changed, 1 insertion(+) create mode 100644 Misc/NEWS.d/next/Core_and_Builtins/2026-03-25-16-45-31.gh-issue-146427.sbxyZO.rst diff --git a/Misc/NEWS.d/next/Core_and_Builtins/2026-03-25-16-45-31.gh-issue-146427.sbxyZO.rst b/Misc/NEWS.d/next/Core_and_Builtins/2026-03-25-16-45-31.gh-issue-146427.sbxyZO.rst new file mode 100644 index 00000000000000..fec81ab01bec00 --- /dev/null +++ b/Misc/NEWS.d/next/Core_and_Builtins/2026-03-25-16-45-31.gh-issue-146427.sbxyZO.rst @@ -0,0 +1 @@ +Fix a use-after-free in :mod:`_interpqueues` when clearing items from a destroyed interpreter. From 7a9cef64e4c22224ea242177c1f475916be2463f Mon Sep 17 00:00:00 2001 From: AN Long Date: Thu, 26 Mar 2026 00:56:15 +0800 Subject: [PATCH 3/3] Fix news entry --- .../2026-03-25-16-45-31.gh-issue-146427.sbxyZO.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Misc/NEWS.d/next/Core_and_Builtins/2026-03-25-16-45-31.gh-issue-146427.sbxyZO.rst b/Misc/NEWS.d/next/Core_and_Builtins/2026-03-25-16-45-31.gh-issue-146427.sbxyZO.rst index fec81ab01bec00..c1b1e0220be3eb 100644 --- a/Misc/NEWS.d/next/Core_and_Builtins/2026-03-25-16-45-31.gh-issue-146427.sbxyZO.rst +++ b/Misc/NEWS.d/next/Core_and_Builtins/2026-03-25-16-45-31.gh-issue-146427.sbxyZO.rst @@ -1 +1 @@ -Fix a use-after-free in :mod:`_interpqueues` when clearing items from a destroyed interpreter. +Fix a use-after-free in :mod:`!_interpqueues` when clearing items from a destroyed interpreter.