From 0f76da02142be7e9ac459b8f866fd5b6af2c5f34 Mon Sep 17 00:00:00 2001
From: VanshAgarwal24036 <148854295+VanshAgarwal24036@users.noreply.github.com>
Date: Mon, 12 Jan 2026 21:09:32 +0530
Subject: [PATCH] gh-143544: Fix possible use-after-free in the JSON decoder
 when JSONDecodeError disappears during raising it (GH-143561) (cherry picked
 from commit c3157480601499565fd42a8afbdb0207328ac484)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: VanshAgarwal24036 <148854295+VanshAgarwal24036@users.noreply.github.com>
Co-authored-by: Bénédikt Tran <10796600+picnixz@users.noreply.github.com>
---
 Modules/_json.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Modules/_json.c b/Modules/_json.c
index 2f82a69a1579dc..b3959cfe4a11b3 100644
--- a/Modules/_json.c
+++ b/Modules/_json.c
@@ -316,11 +316,12 @@ raise_errmsg(const char *msg, PyObject *s, Py_ssize_t end)
 
     PyObject *exc;
     exc = PyObject_CallFunction(JSONDecodeError, "zOn", msg, s, end);
-    Py_DECREF(JSONDecodeError);
     if (exc) {
         PyErr_SetObject(JSONDecodeError, exc);
         Py_DECREF(exc);
     }
+
+    Py_DECREF(JSONDecodeError);
 }
 
 static void