gh-148596: Fix callback return handling for subclassed ctypes types

Lib/test/test_ctypes/test_callbacks.py

@@ -328,6 +328,17 @@ def func():
                              f"of ctypes callback function {func!r}")
             self.assertIsNone(cm.unraisable.object)
 
+    def test_callback_return_subclass(self):
+        class MyInt(ctypes.c_int):
+            pass
+
+        @ctypes.CFUNCTYPE(MyInt, MyInt)
+        def identity(x):
+            return x
+
+        result = identity(MyInt(42))
+        assert isinstance(result, MyInt)
+        assert result.value == 42
 
 if __name__ == '__main__':
     unittest.main()

Misc/NEWS.d/next/Library/2026-04-19-07-56-51.gh-issue-148596.SKckm9.rst

@@ -0,0 +1,5 @@
+Fix ctypes callback return handling for subclassed simple types.
+
+Returning a ctypes instance (e.g. a subclass of c_int) from a CFUNCTYPE
+callback no longer raises an unraisable TypeError or leaves the result
+buffer uninitialized.

Modules/_ctypes/callbacks.c

@@ -239,7 +239,19 @@ static void _CallPythonObject(ctypes_state *st,
            be the result.  EXCEPT when restype is py_object - Python
            itself knows how to manage the refcount of these objects.
         */
-        PyObject *keep = setfunc(mem, result, restype->size);
+        PyObject *value = result;   /* borrowed */
+        PyObject *unwrapped = NULL; /* new ref if created */
+        if (value != NULL && PyObject_TypeCheck(value, st->PyCData_Type)) {
+            unwrapped = PyObject_GetAttrString(value, "value");
+            if (unwrapped != NULL) {
+                value = unwrapped;
+            } else {
+                /* fallback: clear error and keep original */
+                PyErr_Clear();
+            }
+        }
+
+        PyObject *keep = setfunc(mem, value, restype->size);
 
         if (keep == NULL) {
             /* Could not convert callback result. */