gh-142783: Fix use-after-free vulnerability in zoneinfo module#142786

Closed

fatelei wants to merge 48 commits intopython:mainfrom

fatelei:issue-142783

Commits on Dec 16, 2025

gh-142783: Fix use-after-free vulnerability in zoneinfo module
fatelei
committed
fix: fix windows missing ModuleNotFoundError: No module named 'tzdata.zoneinfo'; 'tzdata' is not a package
fatelei
committed
fix: fix windows ci failed
fatelei
committed
chore: update catch exception
fatelei
committed
fix: in windows ci skip test test_weak_cache_descriptor_use_after_free
fatelei
committed
chore: remove unused import
fatelei
committed
gh-142554: avoid `divmod` crashes due to bad `_pylong.int_divmod` (#142673)

picnixz
authored and
fatelei
committed
gh-142451: correctly copy HMAC attributes in `HMAC.copy()` (#142510)

picnixz
authored and
fatelei
committed
gh-134584: Eliminate redundant refcounting from `_CALL_STR_1` (GH-136070)

Zheaoli
authored and
fatelei
committed
gh-142666: Remove unused variable package in import logic (GH-142667)

hyongtao-code
authored and
fatelei
committed
gh-141938: document treatment of `OSError` raised by `HTTPConnection.getresponse` (#142339)

picnixz
authored and
fatelei
committed
gh-134584: Eliminate redundant refcounting from `_CALL_BUILTION_O` (GH-142695)

authored and
fatelei
committed
gh-127930: use explicit imports in tkinter.simpledialog (#127931)

authored and
fatelei
committed
gh-140189: Revert "Temporarily allow CI failures for iOS (#142365)" (#142660)

hugovk
authored and
fatelei
committed
gh-142681: Improve unicodedata tests (GH-142682)

serhiy-storchaka
authored and
fatelei
committed
gh-134584: Eliminate redundant refcounting from _STORE_SUBSCR_LIST_INT (gh-142703)

corona10
authored and
fatelei
committed
gh-76007: `pydoc`: Catch `DeprecationWarning` for stdlib module `__version__` attributes (#139997)

StanFromIreland
authored and
fatelei
committed
gh-138122: Add some screenshots to the profiling.sampling docs (#142676)

authored and
fatelei
committed
gh-106318: Add examples for str.isnumeric() (#142680)

authored and
fatelei
committed
Use threading.Event rather than boolean flag. (gh-142722)

nascheme
authored and
fatelei
committed
gh-142724: fix error path in `_PyPegen_raise_tokenizer_init_error` (#142725)

AZero13
authored and
fatelei
committed
gh-132657: Use stronger memory ordering for so->mask. (gh-142735)

nascheme
authored and
fatelei
committed
gh-141081: Add a `.gitignore` file to `__pycache__` folders (#141162)

authored and
fatelei
committed
gh-140414: streamline thread state access in `asyncio` (#142742)

kumaraditya303
authored and
fatelei
committed
gh-76007: Deprecate `__version__` attribute in `ctypes` (#142679)

hugovk
authored and
fatelei
committed
gh-142651: make `Mock.call_count` thread-safe (#142656)

chaope
authored and
fatelei
committed
gh-139871: Optimize bytearray construction with encoding (#142243)

cmaloney
authored and
fatelei
committed
gh-138122: Add --subprocesses flag to profile child processes in tachyon (#142636)

pablogsal
authored and
fatelei
committed
gh-142029: Raise `ModuleNotFoundError` instead of crashing on nonexsistent module name given to `create_builtin()` (#142054)

authored and
fatelei
committed
gh-142217: Recommend PyUnicode_InternFromString() to replace _PyUnicode_FromId() (GH-142746)

vstinner
authored and
fatelei
committed
gh-142594: fix by property calls io.TextIOWrapper.detach (GH-142706)

yihong0618
authored and
fatelei
committed
gh-142020: ctypes docs: Note that find_library relies on the programs it runs (GH-142134)

encukou
authored and
fatelei
committed
Move doc on structure from devguide to `InternalDocs` (GH-142237)

authored and
fatelei
committed
gh-142466: Pixi package definitions for downstream use (#142469)

authored and
fatelei
committed
gh-134584: Eliminate redundant refcounting from _CALL_LIST_APPEND (GH-142711)

authored and
fatelei
committed
gh-134584: Eliminate redundant refcounting from _STORE_SUBSCR_DICT (GH-142712)

authored and
fatelei
committed
gh-142472: Clean-up _PyStackRef functions (gh-142479)

colesbury
authored and
fatelei
committed
gh-116738: Make _bz2 module thread-safe (gh-142756)

yoney
authored and
fatelei
committed
GH-142718: JIT: Fix crash due to incorrect caching on side exits when exiting jitted code. (GH-142762)

markshannon
authored and
fatelei
committed
gh-141081: Revert "Add a `.gitignore` file to `__pycache__` folders (#141162)" (#142758)

hugovk
authored and
fatelei
committed
gh-134584: Remove custom float decref ops (GH-142576)

Fidget-Spinner
authored and
fatelei
committed
gh-134584: Eliminate redundant refcounting from `_STORE_ATTR_INSTANCE_VALUE` (GH-142759)

Zheaoli
authored and
fatelei
committed
Add Fidget-Spinner to more JIT CODEOWNERS (GH-142768)

Fidget-Spinner
authored and
fatelei
committed
gh-85222: Document the global start method side effect in multiprocessing (GH-136426)

authored and
fatelei
committed
gh-134584: JIT: Eliminate redundant refcount ops for X_INT (GH-142765)

Fidget-Spinner
authored and
fatelei
committed
gh-142737: Handle lost `io.open` in `_Py_FindSourceFile` (GH-142747)

johnslavik
authored and
fatelei
committed
GH-134584: Remove redundant refcount from `_STORE_ATTR_SLOT` (#142729)

savannahostrowski
authored and
fatelei
committed
gh-142595: Amend be5e0dcdedb (fix NULL pointer dereference) (GH-142775)

skirpichev
authored and
fatelei
committed