From: Christian Heimes <christian@cheimes.de>
Date: Mon, 1 Jul 2013 21:43:09 +0000 (+0200)
Subject: Issue #18328: Reorder ops in PyThreadState_Delete*() functions. Now the
X-Git-Tag: v3.4.0a1~344
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=1d5b933504c77707792c325a3e147028bdc2dd3a;p=python

Issue #18328: Reorder ops in PyThreadState_Delete*() functions. Now the
tstate is first removed from TLS and then deallocated.
CID 1019639 (#1 of 1): Use after free (USE_AFTER_FREE)
 use_after_free: Using freed pointer tstate.
---

1d5b933504c77707792c325a3e147028bdc2dd3a
diff --cc Misc/NEWS
index 6f0b54e7ee,dd6d8d13c7..ab75cd02fb
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@@ -10,8 -12,9 +10,11 @@@ What's New in Python 3.4.0 Alpha 1
  Core and Builtins
  -----------------
  
+ - Issue #18328: Reorder ops in PyThreadState_Delete*() functions. Now the
+   tstate is first removed from TLS and then deallocated.
+ 
 +- Issue #13483: Use VirtualAlloc in obmalloc on Windows.
 +
  - Issue #18184: PyUnicode_FromFormat() and PyUnicode_FromFormatV() now raise
    OverflowError when an argument of %c format is out of range.