crates/vm/src/stdlib/typevar.rs (1)

95-122: ⚠️ Potential issue | 🟠 Major

__bound__ and __constraints__ still hold their locks while calling into Python — same deadlock risk you fixed in __default__.

Lines 101 and 116 call evaluate_constraints.call() / evaluate_bound.call() while the constraints / bound mutex guard is alive. If the evaluator callback triggers re-entrant access to __constraints__ or __bound__ on the same TypeVar, it will deadlock. Apply the same scoped-lock + clone-first pattern used in __default__.

Proposed fix

     #[pygetset]
     fn __constraints__(&self, vm: &VirtualMachine) -> PyResult {
-        let mut constraints = self.constraints.lock();
-        if !vm.is_none(&constraints) {
-            return Ok(constraints.clone());
+        {
+            let constraints = self.constraints.lock();
+            if !vm.is_none(&constraints) {
+                return Ok(constraints.clone());
+            }
         }
         let r = if !vm.is_none(&self.evaluate_constraints) {
-            *constraints = self.evaluate_constraints.call((1i32,), vm)?;
-            constraints.clone()
+            let result = self.evaluate_constraints.call((1i32,), vm)?;
+            *self.constraints.lock() = result.clone();
+            result
         } else {
             vm.ctx.empty_tuple.clone().into()
         };
         Ok(r)
     }

     #[pygetset]
     fn __bound__(&self, vm: &VirtualMachine) -> PyResult {
-        let mut bound = self.bound.lock();
-        if !vm.is_none(&bound) {
-            return Ok(bound.clone());
+        {
+            let bound = self.bound.lock();
+            if !vm.is_none(&bound) {
+                return Ok(bound.clone());
+            }
         }
         let r = if !vm.is_none(&self.evaluate_bound) {
-            *bound = self.evaluate_bound.call((1i32,), vm)?;
-            bound.clone()
+            let result = self.evaluate_bound.call((1i32,), vm)?;
+            *self.bound.lock() = result.clone();
+            result
         } else {
             vm.ctx.none()
         };
         Ok(r)
     }