git.ipfire.org Git - thirdparty/Python/cpython.git/commit

]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit

projects / thirdparty / Python / cpython.git / commit

author	Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
	Thu, 11 Jan 2024 09:24:47 +0000 (10:24 +0100)
committer	GitHub <noreply@github.com>
	Thu, 11 Jan 2024 09:24:47 +0000 (11:24 +0200)
commit	a956e510f6336d5ae111ba429a61c3ade30a7549
tree	d53ee83511e729a3bd0c9001ab8cb6f5bcbc84d1	tree \| snapshot
parent	6e21c590f6c68dace297c82c62d0a1286a2ab066	commit \| diff

[3.11] gh-109858: Protect zipfile from "quoted-overlap" zipbomb (GH-110016) (GH-113913)

Raise BadZipFile when try to read an entry that overlaps with other entry or
central directory.
(cherry picked from commit 66363b9a7b9fe7c99eba3a185b74c5fdbf842eba)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

Lib/test/test_zipfile.py		diff \| blob \| blame \| history
Lib/zipfile.py		diff \| blob \| blame \| history
Misc/NEWS.d/next/Library/2023-09-28-13-15-51.gh-issue-109858.43e2dg.rst	[new file with mode: 0644]	blob

Mirror of https://github.com/python/cpython.git

RSS Atom