Crash report

What happened?

The following double-frees integers being added to the deque:

from collections import deque
import _testcapi

for n in range(100):
    try:
        _testcapi.set_nomemory(n, n+1)
        deque().extend(range(1000, 1500))
    except Exception as e:
        pass
    finally:
        _testcapi.remove_mem_hooks()    

./Include/refcount.h:520: _Py_NegativeRefcount: Assertion failed: object has negative ref count
<object at 0x105f21580 is freed>

Problem

deque_extend_impl

BUT, the only time deque_append_lock_held returns -1 is if a new block allocation fails:

As far as I can tell, deque_append_lock_held reliably steals the reference from callers, so deque_extend_impl should not attempt to decref item after calling deque_append_lock_held in any situation.

CPython versions tested on:

CPython main branch

Operating systems tested on:

macOS

Output from running 'python -VV' on the command line:

Python 3.16.0a0 (heads/main-dirty:c4739533f33, Jul 3 2026, 12:23:57) [Clang 21.0.0 (clang-2100.3.20.102)]

Linked PRs

• gh-152951 - Fix double DECREF when newblock fails during deque.extend calls #152961
• [3.15] gh-152951 - Fix double DECREF when newblock fails during deque.extend calls (GH-152961) #152971
• [3.14] gh-152951 - Fix double DECREF when newblock fails during deque.extend calls (GH-152961) #152972
• [3.13] gh-152951 - Fix double DECREF when newblock fails during deque.extend calls (GH-152961) #152973