]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-39017: Avoid infinite loop in the tarfile module (GH-21454) (GH-21484)
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Wed, 15 Jul 2020 12:35:08 +0000 (05:35 -0700)
committerGitHub <noreply@github.com>
Wed, 15 Jul 2020 12:35:08 +0000 (08:35 -0400)
commit79c6b602efc9a906c8496f3d5f4d54c54b48fa06
tree21d3ba06a19f57a447b2549e73cfa7ddfa553c7c
parent620e276a8c1d53332fbf08d369be87f862b6949d
bpo-39017: Avoid infinite loop in the tarfile module (GH-21454) (GH-21484)

Avoid infinite loop when reading specially crafted TAR files using the tarfile module
(CVE-2019-20907).
(cherry picked from commit 5a8d121a1f3ef5ad7c105ee378cc79a3eac0c7d4)

Co-authored-by: Rishi <rishi_devan@mail.com>
Lib/tarfile.py
Lib/test/recursion.tar [new file with mode: 0644]
Lib/test/test_tarfile.py
Misc/NEWS.d/next/Library/2020-07-12-22-16-58.bpo-39017.x3Cg-9.rst [new file with mode: 0644]