Fix crashes found hunting the last open fuzzing record - #8524

Open

youknowone wants to merge 30 commits into

RustPython:mainfrom

youknowone:fuzzer-issues

Commits on Aug 15, 2026

specialize: check the member descriptor's type before caching its slot offset
youknowone
committed
a4c5a16
socket: reserve recv()'s buffer fallibly
youknowone
committed
61db297
types: count the __call__ and __get__ slot dispatches as recursion
youknowone
committed
a57aba0
typevar: show a ParamSpecArgs origin by its repr
youknowone
committed
41457f0
Do not hold a lock across a call back into Python
youknowone
committed
8a8ac51
Validate memoryview.cast() arguments and export negative strides correctly
youknowone
committed
ee86c31
Charge native recursion to the stack, not to the frame limit
youknowone
committed
7f21d94
Report a size that cannot be allocated instead of aborting on it
youknowone
committed
08ad9d8
marshal: answer allow_code where a code object is written or read
youknowone
committed
df0787d
Do not lock an object while running code that can reach it
youknowone
committed
b959317
Stop asserting a pbkdf2 message that depends on the width of a C long
youknowone
committed
b9864f8
Publish and read the same pointer for a thread's top frame
youknowone
committed
2000aee
Decide stop-the-world parking under the thread registry lock
youknowone
committed
0790d1c
Keep an atexit callback alive while it is being compared
youknowone
committed
96ece13
Hold atexit entries in PyRc rather than Arc
youknowone
committed
9d0499a
Do not hold a buffer's storage while waiting for a peer
youknowone
committed
bec31aa
Do not hold a buffer's storage while waiting to hand it over
youknowone
committed
a355995
Check select()'s descriptor limit while the sequence is walked
youknowone
committed
9bee569
Bound native recursion where the C stack cannot be measured
youknowone
committed
8c421b0
Report the failure to allocate pbkdf2's key and Take.readinto's scratch
youknowone
committed
5cc2bd5
Read the frozen-code tuple length as a signed length
youknowone
committed
186b856
Make the snippets from the fuzzer sweep assert what they check
youknowone
committed
a986734
Ask for a marshal container's room instead of assuming it
youknowone
committed
6d13216
Compare the blocking-buffer snippet against something
youknowone
committed
8064620
Refuse array.frombytes() a source whose items are not bytes
youknowone
committed
4b5b827
Tell apart the ways marshal data can be bad
youknowone
committed
3d05c82

Navigation Menu

Uh oh!

Fix crashes found hunting the last open fuzzing record - #8524

Fix crashes found hunting the last open fuzzing record#8524
youknowone wants to merge 30 commits into
RustPython:mainfrom
youknowone:fuzzer-issues

Commits on Aug 15, 2026

specialize: check the member descriptor's type before caching its slot offset

socket: reserve recv()'s buffer fallibly

types: count the call and get slot dispatches as recursion

typevar: show a ParamSpecArgs origin by its repr

Do not hold a lock across a call back into Python

Validate memoryview.cast() arguments and export negative strides correctly

Charge native recursion to the stack, not to the frame limit

Report a size that cannot be allocated instead of aborting on it

marshal: answer allow_code where a code object is written or read

Do not lock an object while running code that can reach it

Stop asserting a pbkdf2 message that depends on the width of a C long

Publish and read the same pointer for a thread's top frame

Decide stop-the-world parking under the thread registry lock

Keep an atexit callback alive while it is being compared

Hold atexit entries in PyRc rather than Arc

Do not hold a buffer's storage while waiting for a peer

Do not hold a buffer's storage while waiting to hand it over

Check select()'s descriptor limit while the sequence is walked

Bound native recursion where the C stack cannot be measured

Report the failure to allocate pbkdf2's key and Take.readinto's scratch

Read the frozen-code tuple length as a signed length

Make the snippets from the fuzzer sweep assert what they check

Ask for a marshal container's room instead of assuming it

Compare the blocking-buffer snippet against something

Refuse array.frombytes() a source whose items are not bytes

Tell apart the ways marshal data can be bad

Commits on Aug 16, 2026

Hash the collector's tables by address rather than by SipHash

Keep the collection's candidates and their counts in one table

gc: collect referents into one buffer instead of a vector per object

memoryview and struct: match the checks and errors of the reference