]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.8] gh-109858: Protect zipfile from "quoted-overlap" zipbomb (GH-110016) (GH-113916)
authorSerhiy Storchaka <storchaka@gmail.com>
Wed, 17 Jan 2024 13:41:50 +0000 (15:41 +0200)
committerGitHub <noreply@github.com>
Wed, 17 Jan 2024 13:41:50 +0000 (14:41 +0100)
commitd05bac0b74153beb541b88b4fca33bf053990183
treef808f6840c90cf854b84e678c0e5848cae3ac470
parentfb57c39c2dc633b3cfe185837815196076a89973
[3.8] gh-109858: Protect zipfile from "quoted-overlap" zipbomb (GH-110016) (GH-113916)

Raise BadZipFile when try to read an entry that overlaps with other entry or
central directory.
(cherry picked from commit 66363b9a7b9fe7c99eba3a185b74c5fdbf842eba)
Lib/test/test_zipfile.py
Lib/zipfile.py
Misc/NEWS.d/next/Library/2023-09-28-13-15-51.gh-issue-109858.43e2dg.rst [new file with mode: 0644]