gh-132011: Fix crash on invalid CALL_LIST_APPEND deoptimization

Lib/test/test_list.py

@@ -4,7 +4,7 @@
 from test import list_tests, support
 from test.support import cpython_only
 from test.support.import_helper import import_module
-from test.support.script_helper import assert_python_failure
+from test.support.script_helper import assert_python_failure, assert_python_ok
 import pickle
 import unittest
 
@@ -332,5 +332,25 @@ def test_no_memory(self):
         else:
             self.assertNotEqual(rc, -int(signal.SIGSEGV))
 
+    def test_deopt_from_append_list(self):
+        # gh-132011: it used to crash, because
+        # of `CALL_LIST_APPEND` specializetion failure.
+        code = textwrap.dedent("""
+        l = []
+        def lappend(l, x, y):
+            l.append((x, y))
+        for x in range(3):
+            lappend(l, None, None)
+        try:
+            lappend(list, None, None)
+        except TypeError:
+            pass
+        else:
+            raise AssertionError
+        """)
+
+        rc, _, _ = assert_python_ok("-c", code)
+        self.assertEqual(rc, 0)
+
 if __name__ == "__main__":
     unittest.main()

Misc/NEWS.d/next/Core_and_Builtins/2025-04-02-17-47-14.gh-issue-132011.dNh64H.rst

@@ -0,0 +1 @@
+Fix crash on incorrect ``CALL_LIST_APPEND`` deoptimization.

Python/bytecodes.c

@@ -4233,7 +4233,7 @@ dummy_func(
 
             PyInterpreterState *interp = tstate->interp;
             DEOPT_IF(callable_o != interp->callable_cache.list_append);
-            assert(self_o != NULL);
+            DEOPT_IF(self_o == NULL);
             DEOPT_IF(!PyList_Check(self_o));
             DEOPT_IF(!LOCK_OBJECT(self_o));
             STAT_INC(CALL, hit);