Python (IBB): Use-after-free in _asyncio_Future_remove_done_callback

2017-03-26T04:18:18
ID H1:216151
Type hackerone
Reporter nedw
Modified 2019-11-12T09:00:49

Description

http://bugs.python.org/issue28963

Callbacks could be removed from a list while it was iterated, leading to an out of bounds access. A fix for this bug is now in the CPython repository.