commit 907ee1f14aaf587683ced44818c5a1d1cabf4174
author Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com> Sun May 24 14:31:47 2020 -0700
committer GitHub <noreply@github.com> Sun May 24 14:31:47 2020 -0700
tree 9aa24db133b55bc1adbaa5e63761b89bb75c769c
parent 1ae0fd87a072426e35ff84dc6d1b2759d9ebee70

bpo-36290: Fix keytword collision handling in AST node constructors (GH-12382)

(cherry picked from commit c73914a562580ae72048876cb42ed8e76e2c83f9)

Co-authored-by: Rémi Lapeyre <remi.lapeyre@lenstra.fr>

Python/Python-ast.c

diff --git a/Python/Python-ast.c b/Python/Python-ast.c
index f73f035..bcf9456 100644
--- a/Python/Python-ast.c
+++ b/Python/Python-ast.c
@@ -571,8 +571,9 @@
     }
     if (fields) {
         numfields = PySequence_Size(fields);
-        if (numfields == -1)
+        if (numfields == -1) {
             goto cleanup;
+        }
     }
 
     res = 0; /* if no error occurs, this stays 0 to the end */
@@ -593,15 +594,35 @@
         }
         res = PyObject_SetAttr(self, name, PyTuple_GET_ITEM(args, i));
         Py_DECREF(name);
-        if (res < 0)
+        if (res < 0) {
             goto cleanup;
+        }
     }
     if (kw) {
         i = 0;  /* needed by PyDict_Next */
         while (PyDict_Next(kw, &i, &key, &value)) {
-            res = PyObject_SetAttr(self, key, value);
-            if (res < 0)
+            int contains = PySequence_Contains(fields, key);
+            if (contains == -1) {
+                res = -1;
                 goto cleanup;
+            } else if (contains == 1) {
+                Py_ssize_t p = PySequence_Index(fields, key);
+                if (p == -1) {
+                    res = -1;
+                    goto cleanup;
+                }
+                if (p < PyTuple_GET_SIZE(args)) {
+                    PyErr_Format(PyExc_TypeError,
+                        "%.400s got multiple values for argument '%U'",
+                        Py_TYPE(self)->tp_name, key);
+                    res = -1;
+                    goto cleanup;
+                }
+            }
+            res = PyObject_SetAttr(self, key, value);
+            if (res < 0) {
+                goto cleanup;
+            }
         }
     }
   cleanup: