git.ipfire.org Git - thirdparty/Python/cpython.git/commit

]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit

projects / thirdparty / Python / cpython.git / commit

author	Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
	Wed, 17 Jan 2024 13:50:10 +0000 (14:50 +0100)
committer	GitHub <noreply@github.com>
	Wed, 17 Jan 2024 13:50:10 +0000 (14:50 +0100)
commit	30fe5d853b56138dbec62432d370a1f99409fc85
tree	3a140aac32aef77ea1aab4ea0b92a2d0a4cd01c1	tree \| snapshot
parent	8eaeefe49d179ca4908d052745e3bb8b6f238f82	commit \| diff

[3.10] gh-109858: Protect zipfile from "quoted-overlap" zipbomb (GH-110016) (GH-113914)

Raise BadZipFile when try to read an entry that overlaps with other entry or
central directory.
(cherry picked from commit 66363b9a7b9fe7c99eba3a185b74c5fdbf842eba)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

Lib/test/test_zipfile.py		diff \| blob \| blame \| history
Lib/zipfile.py		diff \| blob \| blame \| history
Misc/NEWS.d/next/Library/2023-09-28-13-15-51.gh-issue-109858.43e2dg.rst	[new file with mode: 0644]	blob

Mirror of https://github.com/python/cpython.git

RSS Atom