Title: genericaliasobject.c: Two NULL dereference bugs · Issue #148222 · python/cpython · GitHub
Open Graph Title: genericaliasobject.c: Two NULL dereference bugs · Issue #148222 · python/cpython
X Title: genericaliasobject.c: Two NULL dereference bugs · Issue #148222 · python/cpython
Description: Bug report Bug description: Parent: #146102 https://gist.github.com/devdanzin/266ca45099796a2373866a07447d5ebf Summary ga_vectorcall (line 653): PyVectorcall_Function(alias->origin) can return NULL, immediately called as function pointer...
Open Graph Description: Bug report Bug description: Parent: #146102 https://gist.github.com/devdanzin/266ca45099796a2373866a07447d5ebf Summary ga_vectorcall (line 653): PyVectorcall_Function(alias->origin) can return NULL...
X Description: Bug report Bug description: Parent: #146102 https://gist.github.com/devdanzin/266ca45099796a2373866a07447d5ebf Summary ga_vectorcall (line 653): PyVectorcall_Function(alias->origin) can return N...
Opengraph URL: https://github.com/python/cpython/issues/148222
X: @github
Domain: github.com
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"genericaliasobject.c: Two NULL dereference bugs","articleBody":"# Bug report\n\n### Bug description:\n\nParent: https://github.com/python/cpython/issues/146102\n\nhttps://gist.github.com/devdanzin/266ca45099796a2373866a07447d5ebf\n\n\n## Summary\n\n1. `ga_vectorcall` (line 653): `PyVectorcall_Function(alias-\u003eorigin)` can return NULL, immediately called as function pointer → segfault.\n2. `_Py_make_parameters` (line 243-245): After `_PyTuple_Resize` fails, `parameters` is NULL but `Py_DECREF(parameters)` is called → crash.\n\n## Fix\n\n1. Add NULL check and fallback to `PyObject_Vectorcall`.\n2. Change `Py_DECREF(parameters)` to `Py_XDECREF(parameters)` at line 245.\n\n### CPython versions tested on:\n\nCPython main branch\n\n### Operating systems tested on:\n\n_No response_\n\n\u003c!-- gh-linked-prs --\u003e\n### Linked PRs\n* gh-148226\n* gh-148705\n* gh-148712\n* gh-148717\n\u003c!-- /gh-linked-prs --\u003e\n","author":{"url":"https://github.com/prakashsellathurai","@type":"Person","name":"prakashsellathurai"},"datePublished":"2026-04-07T14:40:26.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/148222/cpython/issues/148222"}
| route-pattern | /_view_fragments/issues/show/:user_id/:repository/:id/issue_layout(.:format) |
| route-controller | voltron_issues_fragments |
| route-action | issue_layout |
| fetch-nonce | v2:14609d86-7852-7e39-85bf-6748ec7b19ac |
| current-catalog-service-hash | 81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114 |
| request-id | D628:DF9E4:47CAE:6259D:6A5110C1 |
| html-safe-nonce | 0076166498078b2fc6b40c26b50c2762afd7bd04e322ccc21bb68ad8e30d4f86 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJENjI4OkRGOUU0OjQ3Q0FFOjYyNTlEOjZBNTExMEMxIiwidmlzaXRvcl9pZCI6IjYxMTk4OTE2NTk0MTI2NDU3NyIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 53b735dfacaa1987c98cb4e33bfb7fc001f98d13496755d0fe1f88b48addf779 |
| hovercard-subject-tag | issue:4218450383 |
| github-keyboard-shortcuts | repository,issues,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/issues/show/python/cpython/148222/issue_layout |
| twitter:image | https://opengraph.githubassets.com/6f46e03e7d182636957efeba4e3f6a01205874d5557516d047fdaf3e5c14be45/python/cpython/issues/148222 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/6f46e03e7d182636957efeba4e3f6a01205874d5557516d047fdaf3e5c14be45/python/cpython/issues/148222 |
| og:image:alt | Bug report Bug description: Parent: #146102 https://gist.github.com/devdanzin/266ca45099796a2373866a07447d5ebf Summary ga_vectorcall (line 653): PyVectorcall_Function(alias->origin) can return NULL... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | prakashsellathurai |
| hostname | github.com |
| expected-hostname | github.com |
| None | b076e100febaa00374cd89239f915d00dd3187f7c68b12bc2b7688181305344d |
| turbo-cache-control | no-preview |
| go-import | github.com/python/cpython git https://github.com/python/cpython.git |
| octolytics-dimension-user_id | 1525981 |
| octolytics-dimension-user_login | python |
| octolytics-dimension-repository_id | 81598961 |
| octolytics-dimension-repository_nwo | python/cpython |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 81598961 |
| octolytics-dimension-repository_network_root_nwo | python/cpython |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | f9137f6d981cbbfd780af369f80ce890b2d0d2d4 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width