| 1 | n/a | """ |
|---|
| 2 | n/a | _PyType_Lookup() returns a borrowed reference. |
|---|
| 3 | n/a | This attacks PyObject_GenericSetAttr(). |
|---|
| 4 | n/a | |
|---|
| 5 | n/a | NB. on my machine this crashes in 2.5 debug but not release. |
|---|
| 6 | n/a | """ |
|---|
| 7 | n/a | |
|---|
| 8 | n/a | class A(object): |
|---|
| 9 | n/a | pass |
|---|
| 10 | n/a | |
|---|
| 11 | n/a | class B(object): |
|---|
| 12 | n/a | def __del__(self): |
|---|
| 13 | n/a | print("hi") |
|---|
| 14 | n/a | del C.d |
|---|
| 15 | n/a | |
|---|
| 16 | n/a | class D(object): |
|---|
| 17 | n/a | def __set__(self, obj, value): |
|---|
| 18 | n/a | self.hello = 42 |
|---|
| 19 | n/a | |
|---|
| 20 | n/a | class C(object): |
|---|
| 21 | n/a | d = D() |
|---|
| 22 | n/a | |
|---|
| 23 | n/a | def g(): |
|---|
| 24 | n/a | pass |
|---|
| 25 | n/a | |
|---|
| 26 | n/a | |
|---|
| 27 | n/a | c = C() |
|---|
| 28 | n/a | a = A() |
|---|
| 29 | n/a | a.cycle = a |
|---|
| 30 | n/a | a.other = B() |
|---|
| 31 | n/a | |
|---|
| 32 | n/a | lst = [None] * 1000000 |
|---|
| 33 | n/a | i = 0 |
|---|
| 34 | n/a | del a |
|---|
| 35 | n/a | while 1: |
|---|
| 36 | n/a | c.d = 42 # segfaults in PyMethod_New(__func__=D.__set__, __self__=d) |
|---|
| 37 | n/a | lst[i] = c.g # consume the free list of instancemethod objects |
|---|
| 38 | n/a | i += 1 |
|---|