git.ipfire.org Git - thirdparty/Python/cpython.git/commit

]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit

projects / thirdparty / Python / cpython.git / commit

author	Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
	Wed, 17 Jan 2024 13:48:06 +0000 (14:48 +0100)
committer	GitHub <noreply@github.com>
	Wed, 17 Jan 2024 13:48:06 +0000 (14:48 +0100)
commit	a2c59992e9e8d35baba9695eb186ad6c6ff85c51
tree	90b1205c4073a0744a2f052e80697802a060eed7	tree \| snapshot
parent	d54e22a669ae6e987199bb5d2c69bb5a46b0083b	commit \| diff

[3.9] gh-109858: Protect zipfile from "quoted-overlap" zipbomb (GH-110016) (GH-113915)

Raise BadZipFile when try to read an entry that overlaps with other entry or
central directory.
(cherry picked from commit 66363b9a7b9fe7c99eba3a185b74c5fdbf842eba)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

Lib/test/test_zipfile.py		diff \| blob \| blame \| history
Lib/zipfile.py		diff \| blob \| blame \| history
Misc/NEWS.d/next/Library/2023-09-28-13-15-51.gh-issue-109858.43e2dg.rst	[new file with mode: 0644]	blob

Mirror of https://github.com/python/cpython.git

RSS Atom