[3.12] gh-107913: Fix possible losses of OSError error codes (GH-107930) (#108523)

miss-islington · serhiy-storchaka · web-flow · commit 3e2030371723 · 2023-08-27T01:24:40.000+02:00
gh-107913: Fix possible losses of OSError error codes (GH-107930) Functions like PyErr_SetFromErrno() and SetFromWindowsErr() should be called immediately after using the C API which sets errno or the Windows error code. (cherry picked from commit 2b15536) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
diff --git a/Misc/NEWS.d/next/Library/2023-08-14-11-18-13.gh-issue-107913.4ooY6i.rst b/Misc/NEWS.d/next/Library/2023-08-14-11-18-13.gh-issue-107913.4ooY6i.rst
@@ -0,0 +1,3 @@
+Fix possible losses of ``errno`` and ``winerror`` values in :exc:`OSError`
+exceptions if they were cleared or modified by the cleanup code before
+creating the exception object.
diff --git a/Modules/_cursesmodule.c b/Modules/_cursesmodule.c
@@ -3071,8 +3071,8 @@ _curses_getwin(PyObject *module, PyObject *file)
     }
     datalen = PyBytes_GET_SIZE(data);
     if (fwrite(PyBytes_AS_STRING(data), 1, datalen, fp) != datalen) {
-        Py_DECREF(data);
         PyErr_SetFromErrno(PyExc_OSError);
+        Py_DECREF(data);
         goto error;
     }
     Py_DECREF(data);
diff --git a/Modules/_io/fileio.c b/Modules/_io/fileio.c
@@ -394,6 +394,11 @@ _io_FileIO___init___impl(fileio *self, PyObject *nameobj, const char *mode,
 
             if (async_err)
                 goto error;
+
+            if (self->fd < 0) {
+                PyErr_SetFromErrnoWithFilenameObject(PyExc_OSError, nameobj);
+                goto error;
+            }
         }
         else {
             PyObject *fdobj;
@@ -425,12 +430,7 @@ _io_FileIO___init___impl(fileio *self, PyObject *nameobj, const char *mode,
                 goto error;
             }
         }
-
         fd_is_own = 1;
-        if (self->fd < 0) {
-            PyErr_SetFromErrnoWithFilenameObject(PyExc_OSError, nameobj);
-            goto error;
-        }
 
 #ifndef MS_WINDOWS
         if (_Py_set_inheritable(self->fd, 0, atomic_flag_works) < 0)
@@ -1058,8 +1058,8 @@ _io_FileIO_truncate_impl(fileio *self, PyTypeObject *cls, PyObject *posobj)
     Py_END_ALLOW_THREADS
 
     if (ret != 0) {
-        Py_DECREF(posobj);
         PyErr_SetFromErrno(PyExc_OSError);
+        Py_DECREF(posobj);
         return NULL;
     }
 
diff --git a/Modules/_io/winconsoleio.c b/Modules/_io/winconsoleio.c
@@ -378,8 +378,8 @@ _io__WindowsConsoleIO___init___impl(winconsoleio *self, PyObject *nameobj,
         else
             self->fd = _Py_open_osfhandle_noraise(handle, _O_RDONLY | _O_BINARY);
         if (self->fd < 0) {
-            CloseHandle(handle);
             PyErr_SetFromErrnoWithFilenameObject(PyExc_OSError, nameobj);
+            CloseHandle(handle);
             goto error;
         }
     }
diff --git a/Modules/_localemodule.c b/Modules/_localemodule.c
@@ -737,8 +737,8 @@ _locale_bindtextdomain_impl(PyObject *module, const char *domain,
     }
     current_dirname = bindtextdomain(domain, dirname);
     if (current_dirname == NULL) {
-        Py_XDECREF(dirname_bytes);
         PyErr_SetFromErrno(PyExc_OSError);
+        Py_XDECREF(dirname_bytes);
         return NULL;
     }
     result = PyUnicode_DecodeLocale(current_dirname, NULL);
diff --git a/Modules/_multiprocessing/semaphore.c b/Modules/_multiprocessing/semaphore.c
@@ -516,12 +516,12 @@ _multiprocessing_SemLock_impl(PyTypeObject *type, int kind, int value,
     return result;
 
   failure:
-    if (handle != SEM_FAILED)
-        SEM_CLOSE(handle);
-    PyMem_Free(name_copy);
     if (!PyErr_Occurred()) {
         _PyMp_SetError(NULL, MP_STANDARD_ERROR);
     }
+    if (handle != SEM_FAILED)
+        SEM_CLOSE(handle);
+    PyMem_Free(name_copy);
     return NULL;
 }
 
@@ -556,8 +556,9 @@ _multiprocessing_SemLock__rebuild_impl(PyTypeObject *type, SEM_HANDLE handle,
     if (name != NULL) {
         handle = sem_open(name, 0);
         if (handle == SEM_FAILED) {
+            PyErr_SetFromErrno(PyExc_OSError);
             PyMem_Free(name_copy);
-            return PyErr_SetFromErrno(PyExc_OSError);
+            return NULL;
         }
     }
 #endif
diff --git a/Modules/_ssl.c b/Modules/_ssl.c
@@ -3889,8 +3889,8 @@ _ssl__SSLContext_load_cert_chain_impl(PySSLContext *self, PyObject *certfile,
             /* the password callback has already set the error information */
         }
         else if (errno != 0) {
-            ERR_clear_error();
             PyErr_SetFromErrno(PyExc_OSError);
+            ERR_clear_error();
         }
         else {
             _setSSLError(get_state_ctx(self), NULL, 0, __FILE__, __LINE__);
@@ -3910,8 +3910,8 @@ _ssl__SSLContext_load_cert_chain_impl(PySSLContext *self, PyObject *certfile,
             /* the password callback has already set the error information */
         }
         else if (errno != 0) {
-            ERR_clear_error();
             PyErr_SetFromErrno(PyExc_OSError);
+            ERR_clear_error();
         }
         else {
             _setSSLError(get_state_ctx(self), NULL, 0, __FILE__, __LINE__);
@@ -4140,8 +4140,8 @@ _ssl__SSLContext_load_verify_locations_impl(PySSLContext *self,
         PySSL_END_ALLOW_THREADS
         if (r != 1) {
             if (errno != 0) {
-                ERR_clear_error();
                 PyErr_SetFromErrno(PyExc_OSError);
+                ERR_clear_error();
             }
             else {
                 _setSSLError(get_state_ctx(self), NULL, 0, __FILE__, __LINE__);
@@ -4188,8 +4188,8 @@ _ssl__SSLContext_load_dh_params(PySSLContext *self, PyObject *filepath)
     PySSL_END_ALLOW_THREADS
     if (dh == NULL) {
         if (errno != 0) {
-            ERR_clear_error();
             PyErr_SetFromErrnoWithFilenameObject(PyExc_OSError, filepath);
+            ERR_clear_error();
         }
         else {
             _setSSLError(get_state_ctx(self), NULL, 0, __FILE__, __LINE__);
diff --git a/Modules/faulthandler.c b/Modules/faulthandler.c
@@ -414,11 +414,10 @@ faulthandler_allocate_stack(void)
 
     int err = sigaltstack(&stack, &old_stack);
     if (err) {
+        PyErr_SetFromErrno(PyExc_OSError);
         /* Release the stack to retry sigaltstack() next time */
         PyMem_Free(stack.ss_sp);
         stack.ss_sp = NULL;
-
-        PyErr_SetFromErrno(PyExc_OSError);
         return -1;
     }
     return 0;
diff --git a/Modules/fcntlmodule.c b/Modules/fcntlmodule.c
@@ -211,11 +211,12 @@ fcntl_ioctl_impl(PyObject *module, int fd, unsigned int code,
             if (mutate_arg && (len <= IOCTL_BUFSZ)) {
                 memcpy(str, buf, len);
             }
-            PyBuffer_Release(&pstr); /* No further access to str below this point */
             if (ret < 0) {
                 PyErr_SetFromErrno(PyExc_OSError);
+                PyBuffer_Release(&pstr);
                 return NULL;
             }
+            PyBuffer_Release(&pstr);
             if (mutate_arg) {
                 return PyLong_FromLong(ret);
             }
@@ -240,8 +241,8 @@ fcntl_ioctl_impl(PyObject *module, int fd, unsigned int code,
             ret = ioctl(fd, code, buf);
             Py_END_ALLOW_THREADS
             if (ret < 0) {
-                PyBuffer_Release(&pstr);
                 PyErr_SetFromErrno(PyExc_OSError);
+                PyBuffer_Release(&pstr);
                 return NULL;
             }
             PyBuffer_Release(&pstr);
diff --git a/Modules/getpath.c b/Modules/getpath.c
@@ -341,11 +341,12 @@ getpath_readlines(PyObject *Py_UNUSED(self), PyObject *args)
         return NULL;
     }
     FILE *fp = _Py_wfopen(path, L"rb");
-    PyMem_Free((void *)path);
     if (!fp) {
         PyErr_SetFromErrno(PyExc_OSError);
+        PyMem_Free((void *)path);
         return NULL;
     }
+    PyMem_Free((void *)path);
 
     r = PyList_New(0);
     if (!r) {
diff --git a/Modules/mmapmodule.c b/Modules/mmapmodule.c
@@ -1356,13 +1356,15 @@ new_mmap_object(PyTypeObject *type, PyObject *args, PyObject *kwdict)
     m_obj->data = mmap(NULL, map_size, prot, flags, fd, offset);
     Py_END_ALLOW_THREADS
 
+    int saved_errno = errno;
     if (devzero != -1) {
         close(devzero);
     }
 
     if (m_obj->data == (char *)-1) {
         m_obj->data = NULL;
         Py_DECREF(m_obj);
+        errno = saved_errno;
         PyErr_SetFromErrno(PyExc_OSError);
         return NULL;
     }
diff --git a/Modules/overlapped.c b/Modules/overlapped.c
@@ -367,8 +367,9 @@ _overlapped_RegisterWaitWithQueue_impl(PyObject *module, HANDLE Object,
             &NewWaitObject, Object, PostToQueueCallback, pdata, Milliseconds,
             WT_EXECUTEINWAITTHREAD | WT_EXECUTEONLYONCE))
     {
+        SetFromWindowsErr(0);
         PyMem_RawFree(pdata);
-        return SetFromWindowsErr(0);
+        return NULL;
     }
 
     return Py_BuildValue(F_HANDLE, NewWaitObject);
diff --git a/Modules/posixmodule.c b/Modules/posixmodule.c
diff --git a/Modules/selectmodule.c b/Modules/selectmodule.c
diff --git a/Modules/socketmodule.c b/Modules/socketmodule.c
diff --git a/Objects/unicodeobject.c b/Objects/unicodeobject.c
diff --git a/Python/fileutils.c b/Python/fileutils.c

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	+Fix possible losses of ``errno`` and ``winerror`` values in :exc:`OSError`
	`2`	`+exceptions if they were cleared or modified by the cleanup code before`
	`3`	`+creating the exception object.`
Original file line number	Diff line number	Diff line change
`@@ -3071,8 +3071,8 @@ _curses_getwin(PyObject module, PyObject file)`
`3071`	`3071`	`}`
`3072`	`3072`	`datalen = PyBytes_GET_SIZE(data);`
`3073`	`3073`	`if (fwrite(PyBytes_AS_STRING(data), 1, datalen, fp) != datalen) {`
`3074`		`- Py_DECREF(data);`
`3075`	`3074`	`PyErr_SetFromErrno(PyExc_OSError);`
	`3075`	`+ Py_DECREF(data);`
`3076`	`3076`	`goto error;`
`3077`	`3077`	`}`
`3078`	`3078`	`Py_DECREF(data);`
Original file line number	Diff line number	Diff line change
`@@ -378,8 +378,8 @@ _io__WindowsConsoleIO___init___impl(winconsoleio self, PyObject nameobj,`
`378`	`378`	`else`
`379`	`379`	`self->fd = _Py_open_osfhandle_noraise(handle, _O_RDONLY \| _O_BINARY);`
`380`	`380`	`if (self->fd < 0) {`
`381`		`- CloseHandle(handle);`
`382`	`381`	`PyErr_SetFromErrnoWithFilenameObject(PyExc_OSError, nameobj);`
	`382`	`+ CloseHandle(handle);`
`383`	`383`	`goto error;`
`384`	`384`	`}`
`385`	`385`	`}`
Original file line number	Diff line number	Diff line change
`@@ -737,8 +737,8 @@ _locale_bindtextdomain_impl(PyObject module, const char domain,`
`737`	`737`	`}`
`738`	`738`	`current_dirname = bindtextdomain(domain, dirname);`
`739`	`739`	`if (current_dirname == NULL) {`
`740`		`- Py_XDECREF(dirname_bytes);`
`741`	`740`	`PyErr_SetFromErrno(PyExc_OSError);`
	`741`	`+ Py_XDECREF(dirname_bytes);`
`742`	`742`	`return NULL;`
`743`	`743`	`}`
`744`	`744`	`result = PyUnicode_DecodeLocale(current_dirname, NULL);`
Original file line number	Diff line number	Diff line change
`@@ -516,12 +516,12 @@ _multiprocessing_SemLock_impl(PyTypeObject *type, int kind, int value,`
`516`	`516`	`return result;`
`517`	`517`
`518`	`518`	`failure:`
`519`		`- if (handle != SEM_FAILED)`
`520`		`- SEM_CLOSE(handle);`
`521`		`- PyMem_Free(name_copy);`
`522`	`519`	`if (!PyErr_Occurred()) {`
`523`	`520`	`_PyMp_SetError(NULL, MP_STANDARD_ERROR);`
`524`	`521`	`}`
	`522`	`+ if (handle != SEM_FAILED)`
	`523`	`+ SEM_CLOSE(handle);`
	`524`	`+ PyMem_Free(name_copy);`
`525`	`525`	`return NULL;`
`526`	`526`	`}`
`527`	`527`
`@@ -556,8 +556,9 @@ _multiprocessing_SemLock__rebuild_impl(PyTypeObject *type, SEM_HANDLE handle,`
`556`	`556`	`if (name != NULL) {`
`557`	`557`	`handle = sem_open(name, 0);`
`558`	`558`	`if (handle == SEM_FAILED) {`
	`559`	`+ PyErr_SetFromErrno(PyExc_OSError);`
`559`	`560`	`PyMem_Free(name_copy);`
`560`		`- return PyErr_SetFromErrno(PyExc_OSError);`
	`561`	`+ return NULL;`
`561`	`562`	`}`
`562`	`563`	`}`
`563`	`564`	`#endif`
Original file line number	Diff line number	Diff line change
`@@ -211,11 +211,12 @@ fcntl_ioctl_impl(PyObject *module, int fd, unsigned int code,`
`211`	`211`	`if (mutate_arg && (len <= IOCTL_BUFSZ)) {`
`212`	`212`	`memcpy(str, buf, len);`
`213`	`213`	`}`
`214`		`- PyBuffer_Release(&pstr); /* No further access to str below this point */`
`215`	`214`	`if (ret < 0) {`
`216`	`215`	`PyErr_SetFromErrno(PyExc_OSError);`
	`216`	`+ PyBuffer_Release(&pstr);`
`217`	`217`	`return NULL;`
`218`	`218`	`}`
	`219`	`+ PyBuffer_Release(&pstr);`
`219`	`220`	`if (mutate_arg) {`
`220`	`221`	`return PyLong_FromLong(ret);`
`221`	`222`	`}`
`@@ -240,8 +241,8 @@ fcntl_ioctl_impl(PyObject *module, int fd, unsigned int code,`
`240`	`241`	`ret = ioctl(fd, code, buf);`
`241`	`242`	`Py_END_ALLOW_THREADS`
`242`	`243`	`if (ret < 0) {`
`243`		`- PyBuffer_Release(&pstr);`
`244`	`244`	`PyErr_SetFromErrno(PyExc_OSError);`
	`245`	`+ PyBuffer_Release(&pstr);`
`245`	`246`	`return NULL;`
`246`	`247`	`}`
`247`	`248`	`PyBuffer_Release(&pstr);`
Original file line number	Diff line number	Diff line change
`@@ -341,11 +341,12 @@ getpath_readlines(PyObject Py_UNUSED(self), PyObject args)`
`341`	`341`	`return NULL;`
`342`	`342`	`}`
`343`	`343`	`FILE *fp = _Py_wfopen(path, L"rb");`
`344`		`- PyMem_Free((void *)path);`
`345`	`344`	`if (!fp) {`
`346`	`345`	`PyErr_SetFromErrno(PyExc_OSError);`
	`346`	`+ PyMem_Free((void *)path);`
`347`	`347`	`return NULL;`
`348`	`348`	`}`
	`349`	`+ PyMem_Free((void *)path);`
`349`	`350`
`350`	`351`	`r = PyList_New(0);`
`351`	`352`	`if (!r) {`
Original file line number	Diff line number	Diff line change
`@@ -1356,13 +1356,15 @@ new_mmap_object(PyTypeObject type, PyObject args, PyObject *kwdict)`
`1356`	`1356`	`m_obj->data = mmap(NULL, map_size, prot, flags, fd, offset);`
`1357`	`1357`	`Py_END_ALLOW_THREADS`
`1358`	`1358`
	`1359`	`+ int saved_errno = errno;`
`1359`	`1360`	`if (devzero != -1) {`
`1360`	`1361`	`close(devzero);`
`1361`	`1362`	`}`
`1362`	`1363`
`1363`	`1364`	`if (m_obj->data == (char *)-1) {`
`1364`	`1365`	`m_obj->data = NULL;`
`1365`	`1366`	`Py_DECREF(m_obj);`
	`1367`	`+ errno = saved_errno;`
`1366`	`1368`	`PyErr_SetFromErrno(PyExc_OSError);`
`1367`	`1369`	`return NULL;`
`1368`	`1370`	`}`
Original file line number	Diff line number	Diff line change
`@@ -367,8 +367,9 @@ _overlapped_RegisterWaitWithQueue_impl(PyObject *module, HANDLE Object,`
`367`	`367`	`&NewWaitObject, Object, PostToQueueCallback, pdata, Milliseconds,`
`368`	`368`	`WT_EXECUTEINWAITTHREAD \| WT_EXECUTEONLYONCE))`
`369`	`369`	`{`
	`370`	`+ SetFromWindowsErr(0);`
`370`	`371`	`PyMem_RawFree(pdata);`
`371`		`- return SetFromWindowsErr(0);`
	`372`	`+ return NULL;`
`372`	`373`	`}`
`373`	`374`
`374`	`375`	`return Py_BuildValue(F_HANDLE, NewWaitObject);`