Crash in UnicodeError.__str__ with attributes have custom __str__

[picnixz]

Crash report

What happened?

class Evil(str):
    def __str__(self):
        del exc.object
        return 'evil'

exc = UnicodeEncodeError(Evil(), "object", 0, 0, Evil())
str(exc)

The segmentation fault is quite easy to fix:

reason_str = PyObject_Str(exc->reason);
if (reason_str == NULL) {
    goto done;
}
encoding_str = PyObject_Str(exc->encoding);
if (encoding_str == NULL) {
    goto done;
}

Py_ssize_t len = PyUnicode_GET_LENGTH(exc->object);

It occurs in PyUnicode_GET_LENGTH(exc->object);. And the reason is that PyObject_Str(...) may call artrbitary code.

I have a PR ready that I will post soon.

CPython versions tested on:

CPython main branch

Operating systems tested on:

No response

Output from running 'python -VV' on the command line:

No response

Linked PRs

• gh-128974: Fix UnicodeError.__str__ when custom attributes have side-effects #128975