You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Use after free (stackref borrow after close) in BINARY_OP_INPLACE_ADD_UNICODE #130786
Using the Py_STACKREF_CLOSE_DEBUG option adding in #130785, we can detect a use-after-free in BINARY_OP_INPLACE_ADD_UNICODE:
Fatal Python error: _Py_stackref_record_borrow:
Borrow of closed ref ID 15609203 at Python/generated_cases.c.h:59.
Referred to instance of str at 0x55a2b6c5ff10.
Closed at Python/generated_cases.c.h:344
The problem is that the stack ref is closed before we deopt on line 736.
CPython versions tested on:
CPython main branch
Operating systems tested on:
No response
Output from running 'python -VV' on the command line:
Activity
efimov-mikhail commentedon Sep 29, 2025
It seems that this issue should be closed, since #130708 was merged.