`tp_doc` switch from `PyObject_Malloc` to `PyMem_Malloc` is not backwards compatible

Bug report

In https://github.com/python/cpython/pull/114574 we switched a number of non-PyObject allocations from PyObject_Malloc to PyMem_Malloc, including tp_doc on PyHeapTypeObjects.

Unfortunately, this isn't backwards compatible because C-API extensions may allocate tp_doc contents, which are then freed by CPython in type_dealloc. For example, pybind11 allocates memory for the docstring using PyObject_MALLOC. This leads to crashes when using pybind11 in debug builds of Python 3.13: the allocation uses PyObject_MALLOC, but the memory is freed using PyMem_Free.

We should consider reverting the change to tp_doc and figure out a way to allocate the doc in a way that's both safe (in the free-threaded build) and doesn't break backwards compatibility (in the default build).

cc @erlend-aasland

Linked PRs

• gh-156990

PR 114574で引用されている割り当ての変更と、Objects/typeobject.cの解放パスから始め、続いてリンク先のPR gh-156990を確認してください。PyObject_Mallocで割り当てられたtp_docを使うデバッグビルドの拡張機能のケースを再現してください。既存の拡張機能について、サポートされている両方のビルドモードで割り当てと解放の互換性が維持されれば完了です。