Issue #25725: Fixed a reference leak in pickle.loads() when unpickling

invalid data including tuple instructions.

diff --cc Misc/NEWS
index 758a817a6bcc6117b03b2c5eedb18ee4b172c89c,97e2ecd9f529ef0f2cae0b2b83987539cd5bbea6..ac1744bb60a12ce5d2b965f81a6f2b54cb5bf68c
--- 1/Misc/NEWS
--- 2/Misc/NEWS
+++ b/Misc/NEWS
@@@ -95,18 -115,6 +95,21 @@@ Core and Builtin
  Library
  -------
  
++- Issue #25725: Fixed a reference leak in pickle.loads() when unpickling
++  invalid data including tuple instructions.
++
 +- Issue #25663: In the Readline completer, avoid listing duplicate global
 +  names, and search the global namespace before searching builtins.
 +
 +- Issue #25688: Fixed file leak in ElementTree.iterparse() raising an error.
 +
 +- Issue #23914: Fixed SystemError raised by unpickler on broken pickle data.
 +
 +- Issue #25691: Fixed crash on deleting ElementTree.Element attributes.
 +
 +- Issue #25624: ZipFile now always writes a ZIP_STORED header for directory
 +  entries.  Patch by Dingyuan Wang.
 +
  - Issue #25626: Change three zlib functions to accept sizes that fit in
    Py_ssize_t, but internally cap those sizes to UINT_MAX.  This resolves a
    regression in 3.5 where GzipFile.read() failed to read chunks larger than 2

diff --cc Modules/_pickle.c
Simple merge