_pickle.UnpicklingError: Memo value not found at index 1

[erik895]

Bug report

Bug description:

When pickling a container object. The pickler class will store child-objects to its self.memo even if the container could not be fully pickled (and not written to the output).
This can cause references to memo objects that are not in the output stream.

import sys
import pickle
import io

buf = io.BytesIO()
pickler = pickle.Pickler(buf)
i_will_be_memorized = 'qqqqqqqqqqqq'
i_cant_be_pickled = sys

try:
    pickler.dump([i_will_be_memorized, i_cant_be_pickled])
except TypeError:
    # i_will_be_memorized is now in pickler memory despite the exception
    pass

# this dump will use the memo
pickler.dump(i_will_be_memorized)

data = buf.getbuffer().tobytes()

# so this will fail with:
#   _pickle.UnpicklingError: Memo value not found at index 1
pickle.loads(data)

CPython versions tested on:

3.12

Operating systems tested on:

Windows

Linked PRs

• gh-125756: Document Pickler.clear_memo #125762

[tomasr8]

There's an undocumented clear_memo function which seems to be intended for this exact case:

This method is useful when re-using picklers

cpython/Lib/pickle.py

Lines 478 to 486 in b3c6b2c

	def clear_memo(self):
	"""Clears the pickler's "memo".
	The memo is the data structure that remembers which objects the
	pickler has already seen, so that shared or recursive objects
	are pickled by reference and not by value. This method is
	useful when re-using picklers.
	"""
	self.memo.clear()

In your case, you could probably do something like this:

try:
    pickler.dump([i_will_be_memorized, i_cant_be_pickled])
except TypeError:
    # i_will_be_memorized is now in pickler memory despite the exception
    pickler.clear_memo()

[erik895]

Thanks for the quick reply! I thought clear_memo was not documented because it’s dangerous to use. When you clear the memo, I don’t think that 'action' gets written to the output, so the loader won’t clear its own memo (I have't checked any code, this is just my observation).

As a result, loading a stream where clear_memo was used could lead to loading the wrong objects. If clear_memo is used publicly, I think it deserves its own issue.

import pickle
import io

buf = io.BytesIO()
pickler = pickle.Pickler(buf)

pickler.dump("foo")
pickler.clear_memo()
pickler.dump("bar")
pickler.dump("bar")

buf.seek(0)
loader = pickle.Unpickler(buf)
print(loader.load()) # prints foo
print(loader.load()) # prints bar
print(loader.load()) # prints foo (I wanted bar)