Commit 0552fc2b authored by Antoine Pitrou's avatar Antoine Pitrou

Issue #16230: Fix a crash in select.select() when one the lists changes size while iterated on.

Patch by Serhiy Storchaka.
parent e9e35c3f
...@@ -49,6 +49,15 @@ class SelectTestCase(unittest.TestCase): ...@@ -49,6 +49,15 @@ class SelectTestCase(unittest.TestCase):
self.fail('Unexpected return values from select():', rfd, wfd, xfd) self.fail('Unexpected return values from select():', rfd, wfd, xfd)
p.close() p.close()
# Issue 16230: Crash on select resized list
def test_select_mutated(self):
a = []
class F:
def fileno(self):
del a[-1]
return sys.__stdout__.fileno()
a[:] = [F()] * 10
self.assertEqual(select.select([], a, []), ([], a[:5], []))
def test_main(): def test_main():
test_support.run_unittest(SelectTestCase) test_support.run_unittest(SelectTestCase)
......
...@@ -130,6 +130,9 @@ Core and Builtins ...@@ -130,6 +130,9 @@ Core and Builtins
Library Library
------- -------
- Issue #16230: Fix a crash in select.select() when one the lists changes
size while iterated on. Patch by Serhiy Storchaka.
- Issue #16228: Fix a crash in the json module where a list changes size - Issue #16228: Fix a crash in the json module where a list changes size
while it is being encoded. Patch by Serhiy Storchaka. while it is being encoded. Patch by Serhiy Storchaka.
......
...@@ -87,7 +87,6 @@ seq2set(PyObject *seq, fd_set *set, pylist fd2obj[FD_SETSIZE + 1]) ...@@ -87,7 +87,6 @@ seq2set(PyObject *seq, fd_set *set, pylist fd2obj[FD_SETSIZE + 1])
int i; int i;
int max = -1; int max = -1;
int index = 0; int index = 0;
int len = -1;
PyObject* fast_seq = NULL; PyObject* fast_seq = NULL;
PyObject* o = NULL; PyObject* o = NULL;
...@@ -98,9 +97,7 @@ seq2set(PyObject *seq, fd_set *set, pylist fd2obj[FD_SETSIZE + 1]) ...@@ -98,9 +97,7 @@ seq2set(PyObject *seq, fd_set *set, pylist fd2obj[FD_SETSIZE + 1])
if (!fast_seq) if (!fast_seq)
return -1; return -1;
len = PySequence_Fast_GET_SIZE(fast_seq); for (i = 0; i < PySequence_Fast_GET_SIZE(fast_seq); i++) {
for (i = 0; i < len; i++) {
SOCKET v; SOCKET v;
/* any intervening fileno() calls could decr this refcnt */ /* any intervening fileno() calls could decr this refcnt */
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment