[issue24100] Use after free in siftdown (2)

[Raymond Hettinger]

Raymond Hettinger added the comment:

Paul, this was nice work.  Thanks.

Attaching a patch to make 3.4 match the Python 3.5 version of the code which rearranges the object pointers without changing their reference counts.

With that patch, your crasher no longer seg-faults, but gives this instead:

len(L): 112234
__del__
__del__
Exception ignored in: <bound method X.__del__ of <__main__.X object at 0x10efc9080>>
Traceback (most recent call last):
  File "heap_crasher.py", line 18, in __del__
IndexError: list index out of range

----------
keywords: +patch
versions: +Python 2.7
Added file: http://bugs.python.org/file39260/sc2.diff

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue24100>
_______________________________________