Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[3.7] gh-80254: Disallow recursive usage of cursors in sqlite3 converters #92334

Merged

Conversation

erlend-aasland
Copy link
Contributor

(cherry picked from commit c908dc5)

Co-authored-by: Sergey Fedoseev [email protected]
Co-authored-by: Jelle Zijlstra [email protected]

@erlend-aasland erlend-aasland added 🔨 test-with-buildbots Test PR w/ buildbots; report in status section and removed awaiting review labels May 5, 2022
@bedevere-bot
Copy link

🤖 New build scheduled with the buildbot fleet by @erlend-aasland for commit d52fd31 🤖

If you want to schedule another build, you need to add the ":hammer: test-with-buildbots" label again.

@bedevere-bot bedevere-bot removed the 🔨 test-with-buildbots Test PR w/ buildbots; report in status section label May 5, 2022
@erlend-aasland
Copy link
Contributor Author

erlend-aasland commented May 5, 2022

CI cannot find merge base, and decides that this is not worthy running the tests. Buildbots seem to ignore this fact though, so I guess that it's fine if they are green.

UPDATE: a little bit too fast there; AMD64 FreeBSD Non-Debug is green, but it did not run. It failed before even compiling.

@erlend-aasland
Copy link
Contributor Author

This buildbot run does not look good. Do you experience this often on the 3.7 branch, @ambv?

Copy link
Member

@JelleZijlstra JelleZijlstra left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We're not allowed to merge until regular CI passes (the check is required). Code looks good to me but we'll have to figure out what's up with CI.

@erlend-aasland
Copy link
Contributor Author

I think it is related to 4ac923f

@erlend-aasland
Copy link
Contributor Author

See also GH-21806

@erlend-aasland
Copy link
Contributor Author

I think backporting both GH-24004 and GH-21806 will fix it. Maybe not both are required, but I think both should be backported.

@JelleZijlstra
Copy link
Member

I think backporting both GH-24004 and GH-21806 will fix it. Maybe not both are required, but I think both should be backported.

Seems reasonable. I triggered #92341 and #92342, but I am not authorized to merge to the 3.7 branch.

@erlend-aasland
Copy link
Contributor Author

Great! I'll pull in 3.7 when the backports land.

@vstinner
Copy link
Member

vstinner commented May 5, 2022

The 3.7 branch no longer accept bugfixes, only security fixes: https://devguide.python.org/#status-of-python-branches

Do you consider that this change fix a security issue?

@ned-deily
Copy link
Member

Do you consider that this change fix a security issue?

Yes, see discussion here.

@ned-deily ned-deily merged commit 2a353b2 into python:3.7 May 23, 2022
@erlend-aasland erlend-aasland deleted the backport-sqlite-converter-segfault-3.7 branch May 23, 2022 22:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants