Bug in PyObject_CopyData leads to incorrect data copying order

[buxingtan]

Bug report

Bug description:

version: python 3.14.2

/* Objects/abstract.c, function PyObject_CopyData, lines 727~732 */
    while (elements--) {
        _Py_add_one_to_index_C(view_src.ndim, indices, view_src.shape); /* WRONG: increment before copy */
        dptr = PyBuffer_GetPointer(&view_dest, indices);
        sptr = PyBuffer_GetPointer(&view_src, indices);
        memcpy(dptr, sptr, view_src.itemsize);
    }

maybe can change to

    while (elements--) {
        dptr = PyBuffer_GetPointer(&view_dest, indices);
        sptr = PyBuffer_GetPointer(&view_src, indices);
        memcpy(dptr, sptr, view_src.itemsize);
        _Py_add_one_to_index_C(view_src.ndim, indices, view_src.shape);
    }

I don't know which other versions, besides version 3.14.2, are involved with this code.

CPython versions tested on:

3.14

Operating systems tested on:

Windows

[picnixz]

Please show us a reproducible issue with clear expectations.

[a12k]

Guessing this is an off by one error given _Py_add_one_to_index_C is called before the first memcpy. Would love to see a repro, which should be straightforward to produce @buxingtan.