Repository navigation
Use-after-free in unicode_escape decoder with error handler #133767
Description
Crash report
What happened?
When using .decode("unicode_escape") with an error handler there is a use-after-free segfault.
CPython versions tested on:
CPython main branch
Operating systems tested on:
No response
Output from running 'python -VV' on the command line:
No response
Linked PRs
- gh-133767: Fix use-after-free in the unicode-escape decoder with an error handler #129648
- [3.14] gh-133767: Fix use-after-free in the unicode-escape decoder with an error handler (GH-129648) #133942
- [3.13] gh-133767: Fix use-after-free in the unicode-escape decoder with an error handler (GH-129648) #133944
- [3.12] Fix use-after-free in the unicode-escape decoder with error handler (GH-133767) #134255
- [3.12] gh-133767: Fix use-after-free in the unicode-escape decoder with an error handler (GH-129648) (GH-133944) #134337
- [3.11] gh-133767: Fix use-after-free in the unicode-escape decoder with an error handler (GH-129648) (GH-133944) #134341
- [3.10] gh-133767: Fix use-after-free in the unicode-escape decoder with an error handler (GH-129648) (GH-133944) #134345
- [3.9] gh-133767: Fix use-after-free in the unicode-escape decoder with an error handler (GH-129648) (GH-133944) #134346
Activity
[-]Use-after-free in unicode escape decoder with error handler[/-][+]Use-after-free in `unicode_escape` decoder with error handler[/+]gh-133767: Fix use-after-free in the unicode-escape decoder with an e…
pythongh-133767: Fix use-after-free in the unicode-escape decoder wit…
10 remaining items
[3.9] pythongh-133767: Fix use-after-free in the unicode-escape decod…
[3.12] gh-133767: Fix use-after-free in the unicode-escape decoder wi…
[3.11] gh-133767: Fix use-after-free in the unicode-escape decoder wi…
[3.10] gh-133767: Fix use-after-free in the unicode-escape decoder wi…
[3.9] gh-133767: Fix use-after-free in the unicode-escape decoder wit…
[CVE-2025-4516] Fix use-after-free in the unicode-escape decoder with…
mcepl commentedon Jun 4, 2025
I have uploaded above my draft of the backport to 3.6. Any review or comments would be more than welcome.
Fix use-after-free in the unicode-escape decoder with an error handler
Fix use-after-free in the unicode-escape decoder with an error handler
pythongh-133767: Fix use-after-free in the unicode-escape decoder wit…
pythongh-133767: Fix use-after-free in the unicode-escape decoder wit…
pythongh-133767: Fix use-after-free in the unicode-escape decoder wit…
Objects: decode unicode_escape and bytes escapes with the pyescape Ru…