GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — UAF: `xml.etree.ElementTree.Element.__deepcopy__` when concurrent mutations happen · Issue #133009 · python/cpython

UAF: xml.etree.ElementTree.Element.__deepcopy__ when concurrent mutations happen #133009

New issue
Copy link
New issue
Copy link
Closed
Closed
UAF: xml.etree.ElementTree.Element.__deepcopy__ when concurrent mutations happen#133009
Copy link
Assignees
picnixz
Labels
extension-modulesC modules in the Modules dirC modules in the Modules dirtopic-XMLtype-crashA hard crash of the interpreter, possibly with a core dumpA hard crash of the interpreter, possibly with a core dump

Description

@picnixz
picnixz
opened on Apr 26, 2025
Issue body actions

Crash report

What happened?

Reproducer:

import xml.etree.ElementTree as ET
from copy import deepcopy

class Evil(ET.Element):
    def __deepcopy__(self, memo):
        root.clear()
        return self

root = ET.Element('a')
root.append(Evil('x'))
deepcopy(root)

CPython versions tested on:

CPython main branch

Operating systems tested on:

No response

Output from running 'python -VV' on the command line:

Python 3.14.0a7+ (heads/main:7f02ded29fb, Apr 26 2025, 14:29:01) [GCC 7.5.0]

Linked PRs

  • gh-133009: fix UAF in xml.etree.ElementTree.Element.__deepcopy__ #133010
  • [3.14] gh-133009: fix UAF in xml.etree.ElementTree.Element.__deepcopy__ (GH-133010) #133805
  • [3.13] gh-133009: fix UAF in xml.etree.ElementTree.Element.__deepcopy__ (GH-133010) #133806
Reacted by devdanzin

Activity

  1. picnixz
    added
    extension-modulesC modules in the Modules dirC modules in the Modules dir
    type-crashA hard crash of the interpreter, possibly with a core dumpA hard crash of the interpreter, possibly with a core dump
    on Apr 26, 2025
  2. picnixz
    self-assigned this
    on Apr 26, 2025
  3. picnixz
    added
    topic-XML
    on Apr 26, 2025
  4. picnixz
    added a commit that references this issue on May 10, 2025

    gh-133009: fix UAF in `xml.etree.ElementTree.Element.__deepcopy__` (#…

    116a9f9
  5. miss-islington
    added 2 commits that reference this issue on May 10, 2025

    pythongh-133009: fix UAF in `xml.etree.ElementTree.Element.__deepcopy…

    32edeb3

    pythongh-133009: fix UAF in `xml.etree.ElementTree.Element.__deepcopy…

    94eeb29
  6. picnixz
    added 2 commits that reference this issue on May 10, 2025

    [3.13] gh-133009: fix UAF in `xml.etree.ElementTree.Element.__deepcop…

    9718880

    [3.14] gh-133009: fix UAF in `xml.etree.ElementTree.Element.__deepcop…

    62109c4
  7. picnixz
    closed this as completedon May 10, 2025
  8. Pranjal095
    added a commit that references this issue on Jul 12, 2025

    pythongh-133009: fix UAF in `xml.etree.ElementTree.Element.__deepcopy…

    5d826c5
  9. taegyunkim
    added a commit that references this issue on Aug 4, 2025

    pythongh-133009: fix UAF in `xml.etree.ElementTree.Element.__deepcopy…

    86a762f
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

  • @picnixz
    picnixz

Labels

extension-modulesC modules in the Modules dirC modules in the Modules dirtopic-XMLtype-crashA hard crash of the interpreter, possibly with a core dumpA hard crash of the interpreter, possibly with a core dump

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

    You are visitor 01402503 — GeezerVison does not store the pages you look up.
    Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.