Type confusion in FutureIter_throw() which may potentially lead to an arbitrary code execution

I reported this directly to [email protected]. The issue has been fixed. Python Team confirmed that it's fixed and disclosed:

static PyObject *
FutureIter_throw(futureiterobject *self, PyObject *args)
{
    PyObject *type=NULL, *val=NULL, *tb=NULL;
    if (!PyArg_ParseTuple(args, "O|OO", &type, &val, &tb))
        return NULL;

    if (val == Py_None) {
        val = NULL;
    }
    if (tb == Py_None) {
        tb = NULL; …