aio-libs / aio-libs/multidict

multidict C Extension Analysis Report

Abierto
#1,306 2 comentarios 1 reacción 1 asignado Reclamado por @Vizonex Ver en GitHub
bug reproducer: present
Lenguaje dominante
Python
Estrellas
492
Forks
129
Merge medio
14 h 28 min
PR fusionados (30 d)
35

Descripción

I ran a [code analysis tool](https://github.com/devdanzin/cext-review-toolkit) I'm developing on multidict and it generated an interesting report: https://gist.github.com/devdanzin/a36588ae7e2b73f0d85f8a925fb13b3d. It contains issue descriptions, suggested fixes, and reproducers for some of the issues.

From the summary:

> The most critical finding is a **double-free/use-after-free in `md_contains`** and a **crash from swapped format string arguments** in `_err_cannot_fetch`. The iterator and view types are also missing the heap type lifecycle management (`Py_VISIT(Py_TYPE(self))`) that the main dict types correctly implement.

I hope it helps.

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.