Repository navigation
crash in PyTuple_GET_SIZE: Assertion `PyTuple_Check(op)' failed #138479
Description
Crash report
What happened?
The following code causes a crash in cpython:
class Generic:
def __call__(*a):
print(a)
def __getattr__(self, name):
return Generic()
name_5 = Generic()
type name_3[*name_2] = 0
name_3[name_5][0]output:
(<__main__.Generic object at 0x7fb99dc5a280>, name_3[<__main__.Generic object at 0x7fb99d792420>], (0,))
(<__main__.Generic object at 0x7fb99dbd7960>, None)
python3: ./Include/cpython/tupleobject.h:24: PyTuple_GET_SIZE: Assertion `PyTuple_Check(op)' failed.
fish: Job 1, '../cpython/install/bin/python3 …' terminated by signal SIGABRT (Abbruch)I found this example while fuzzing with pysource-codegen.
CPython versions tested on:
3.12, 3.13, 3.14, 3.15
Operating systems tested on:
Linux
Output from running 'python -VV' on the command line:
Python 3.14.0rc2+ (heads/3.14:45a79b4f4b7, Sep 3 2025, 22:05:34) [GCC 12.2.0]
Activity
ZeroIntensity commentedon Sep 3, 2025
I think I see the problem. I'll work on a fix.
gh-138479: Ensure that `__typing_subst__` returns a tuple (GH-138482)
pythongh-138479: Ensure that `__typing_subst__` returns a tuple (pyth…
pythongh-138479: Ensure that `__typing_subst__` returns a tuple (pyth…
[3.13] pythongh-138479: Ensure that `__typing_subst__` returns a tuple (
[3.13] gh-138479: Ensure that `__typing_subst__` returns a tuple (GH-…
ZeroIntensity commentedon Sep 11, 2025
The 3.14 backport will be merged separately (probably in 3.14.1), thanks for the report!
[3.14] gh-138479: Ensure that `__typing_subst__` returns a tuple (GH-…