Fix crashes found hunting the last open fuzzing record - #8524

Merged

youknowone merged 31 commits into

RustPython:mainfrom

youknowone:fuzzer-issues

Aug 16, 2026

Commits on Aug 16, 2026

specialize: check the member descriptor's type before caching its slot offset
youknowone
committed
f24691e
socket: reserve recv()'s buffer fallibly
youknowone
committed
40e67e1
types: count the __call__ and __get__ slot dispatches as recursion
youknowone
committed
40a839b
typevar: show a ParamSpecArgs origin by its repr
youknowone
committed
bb744d6
Do not hold a lock across a call back into Python
youknowone
committed
7e4b96e
Validate memoryview.cast() arguments and export negative strides correctly
youknowone
committed
6e47646
Charge native recursion to the stack, not to the frame limit
youknowone
committed
2432fd7
Report a size that cannot be allocated instead of aborting on it
youknowone
committed
02a6193
marshal: answer allow_code where a code object is written or read
youknowone
committed
ff52fe0
Do not lock an object while running code that can reach it
youknowone
committed
d7cf971
Stop asserting a pbkdf2 message that depends on the width of a C long
youknowone
committed
61b989b
Publish and read the same pointer for a thread's top frame
youknowone
committed
c9449a6
Decide stop-the-world parking under the thread registry lock
youknowone
committed
ee782e0
Keep an atexit callback alive while it is being compared
youknowone
committed
fab2b3b
Hold atexit entries in PyRc rather than Arc
youknowone
committed
e3dcd8e
Do not hold a buffer's storage while waiting for a peer
youknowone
committed
773ae23
Do not hold a buffer's storage while waiting to hand it over
youknowone
committed
125d5aa
Check select()'s descriptor limit while the sequence is walked
youknowone
committed
62ed618
Bound native recursion where the C stack cannot be measured
youknowone
committed
c65fe42
Report the failure to allocate pbkdf2's key and Take.readinto's scratch
youknowone
committed
00b64c3
Read the frozen-code tuple length as a signed length
youknowone
committed
7c40cb9
Make the snippets from the fuzzer sweep assert what they check
youknowone
committed
ce43008
Ask for a marshal container's room instead of assuming it
youknowone
committed
3d69690
Compare the blocking-buffer snippet against something
youknowone
committed
366ef3e
Refuse array.frombytes() a source whose items are not bytes
youknowone
committed
ab0d4ff
Tell apart the ways marshal data can be bad
youknowone
committed
7fad3b0
Hash the collector's tables by address rather than by SipHash
youknowone
committed
a7f7021
Keep the collection's candidates and their counts in one table
youknowone
committed
691d6ca
gc: collect referents into one buffer instead of a vector per object
youknowone
committed
3139b95
memoryview and struct: match the checks and errors of the reference
youknowone
committed
dce42a3
io: decide the readinto path by file type, not by seekability
youknowone
committed
5a5ba17

Fix crashes found hunting the last open fuzzing record by youknowone · Pull Request #8524 · RustPython/RustPython · GitHub

Uh oh!

Fix crashes found hunting the last open fuzzing record - #8524

Fix crashes found hunting the last open fuzzing record#8524
youknowone merged 31 commits into
RustPython:mainfrom
youknowone:fuzzer-issues

Commits on Aug 16, 2026

specialize: check the member descriptor's type before caching its slot offset

socket: reserve recv()'s buffer fallibly

types: count the call and get slot dispatches as recursion

typevar: show a ParamSpecArgs origin by its repr

Do not hold a lock across a call back into Python

Validate memoryview.cast() arguments and export negative strides correctly

Charge native recursion to the stack, not to the frame limit

Report a size that cannot be allocated instead of aborting on it

marshal: answer allow_code where a code object is written or read

Do not lock an object while running code that can reach it

Stop asserting a pbkdf2 message that depends on the width of a C long

Publish and read the same pointer for a thread's top frame

Decide stop-the-world parking under the thread registry lock

Keep an atexit callback alive while it is being compared

Hold atexit entries in PyRc rather than Arc

Do not hold a buffer's storage while waiting for a peer

Do not hold a buffer's storage while waiting to hand it over

Check select()'s descriptor limit while the sequence is walked

Bound native recursion where the C stack cannot be measured

Report the failure to allocate pbkdf2's key and Take.readinto's scratch

Read the frozen-code tuple length as a signed length

Make the snippets from the fuzzer sweep assert what they check

Ask for a marshal container's room instead of assuming it

Compare the blocking-buffer snippet against something

Refuse array.frombytes() a source whose items are not bytes

Tell apart the ways marshal data can be bad

Hash the collector's tables by address rather than by SipHash

Keep the collection's candidates and their counts in one table

gc: collect referents into one buffer instead of a vector per object

memoryview and struct: match the checks and errors of the reference

io: decide the readinto path by file type, not by seekability

Fix crashes found hunting the last open fuzzing record by youknowone · Pull Request #8524 · RustPython/RustPython · GitHub

Uh oh!

Fix crashes found hunting the last open fuzzing record - #8524

Fix crashes found hunting the last open fuzzing record#8524youknowone merged 31 commits intoRustPython:mainRustPython/RustPython:mainfrom youknowone:fuzzer-issuesyouknowone/RustPython:fuzzer-issuesCopy head branch name to clipboard

Commits

Commits on Aug 16, 2026

Fix crashes found hunting the last open fuzzing record#8524
youknowone merged 31 commits into
RustPython:mainfrom
youknowone:fuzzer-issues