SIGN IN SIGN UP
python / cpython UNCLAIMED

The Python programming language

0 0 1 Python

gh-126037: fix UAF in `xml.etree.ElementTree.Element.find*` when concurrent mutations happen (#127964)

We fix a use-after-free in the `find`, `findtext` and `findall` methods of `xml.etree.ElementTree.Element`
objects that can be triggered when the tag to find implements an `__eq__` method that mutates the
element being queried.
B
Bénédikt Tran committed
c57623c221d46daeaedfbf2b32d041fde0c882de
Parent: 6aa88a2
Committed by GitHub <noreply@github.com> on 3/31/2025, 10:26:52 AM