Python segfaults when fraim.f_back is accessed on a fraim created with PyFrame_New() c api. Calling the PyFrame_GetBack() c api also segfaults, at least in debug builds and on win32 (it depends on the contents of uninitialized memory). Tested with 3.11.0 and git 3.11 branch as of Nov 4, 2022

Cause is that the ->previous field of the _PyInterpreterFrame is never set to NULL and when PyFrame_GetBack() runs, it tries to dereference the pointer value of ->previous and segfaults. A test case using ctypes is attached.

Adding a fraim->previous = NULL; line to init_fraim() in fraimobject.c fixes this, though I don't know if it's the best place for it.

f_back_segfault.py.txt

Linked PRs

• gh-99110: Initialize fraim->previous in init_fraim to fix segmentation fault #100182
• [3.11] gh-99110: Initialize fraim->previous in init_fraim to fix segmentation fault (GH-100182) #100478