PublicArchive/cpython
2
0
Fork 0
mirror of https://github.com/python/cpython.git synced 2026-05-06 12:49:07 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
00a9a8a077f224635e88f4537b5a36c9ef45f903
cpython/Modules
T
History
Miss Islington (bot) c3cf71c336 [3.13] gh-148395: Fix a possible UAF in {LZMA,BZ2,_Zlib}Decompressor (GH-148396) (#148479) 
gh-148395: Fix a possible UAF in `{LZMA,BZ2,_Zlib}Decompressor` (GH-148396)

Fix dangling input pointer after `MemoryError` in _lzma/_bz2/_ZlibDecompressor.decompress
(cherry picked from commit 8fc66aef6d)

Co-authored-by: Stan Ulbrych <stan@python.org>
2026-04-13 01:35:24 +00:00
..
_blake2
[3.13] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134962)
2025-06-01 10:27:02 +02:00
_ctypes
[3.13] gh-144100: Fix crash for POINTER(str) used in ctypes argtypes (#144108) (#144245)
2026-01-27 12:59:55 +01:00
_decimal
[3.13] gh-143331: Schedule to remove format "N" for Decimal (GH-143372) (#143477)
2026-01-06 14:02:32 +00:00
_hacl
…
_io
[3.13] gh-144380: Fix incorrect type check in buffered_iternext() (GH-144381) (#144390)
2026-02-02 10:29:16 +00:00
_multiprocessing
[3.13] gh-111178: fix UBSan failures in Modules/_multiprocessing/semaphore.c (GH-129084) (#129100)
2025-01-20 21:05:52 +00:00
_sqlite
[3.13] gh-146090: fix memory management of internal sqlite3 callback contexts (GH-146569) (#146596)
2026-03-29 15:14:58 +02:00
_sre
[3.13] gh-140979: Fix off-by-one error in the RE code validator (GH-140984) (GH-141000)
2025-11-04 18:16:40 +02:00
_ssl
[3.13] gh-137583: Only lock the SSL context, not the SSL socket (GH-137588) (GH-137613)
2025-08-11 22:05:13 -04:00
_testcapi
[3.13] gh-143050: Correct PyLong_FromString() to use _PyLong_Negate() (#145901) (#147437)
2026-03-31 17:06:38 +02:00
_testinternalcapi
[3.13] gh-135641: Fix flaky test_capi.test_lock_two_threads test case (gh-135642) (gh-135688)
2025-06-18 18:47:59 +00:00
_testlimitedcapi
[3.13] gh-132657: add regression test for PySet_Contains with unhashable type (GH-141411) (#141467)
2025-11-12 21:12:18 +05:30
_xxtestfuzz
[3.13] gh-121023: Improve _xxtestfuzz/README.rst (GH-121024) (#124140)
2024-09-23 17:23:54 -07:00
cjkcodecs
[3.13] gh-101828: Fix jisx0213 codecs removing null characters (gh-139340) (gh-140112)
2025-10-14 14:48:29 +00:00
clinic
[3.13] gh-143698: correctly check scheduler and setpgroup values for os.posix_spawn[p] (GH-143699) (#145074)
2026-02-21 16:05:57 +01:00
expat
[3.13] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) (#146604)
2026-03-29 18:50:07 +01:00
_abc.c
…
_asynciomodule.c
[3.13] gh-146615: Fix format specifiers in extension modules (GH-146617) (GH-146652) (GH-146658)
2026-03-31 10:59:06 +00:00
_bisectmodule.c
[3.13] gh-126035: add missing whitespace to *Py_EnterRecursiveCall() messages (GH-126036) (#126058)
2024-10-27 22:19:37 +00:00
_bz2module.c
[3.13] gh-148395: Fix a possible UAF in {LZMA,BZ2,_Zlib}Decompressor (GH-148396) (#148479)
2026-04-13 01:35:24 +00:00
_codecsmodule.c
…
_collectionsmodule.c
[3.13] gh-145492: Fix defaultdict __repr__ infinite recursion (GH-145659) (GH-145746)
2026-03-12 10:45:43 +01:00
_contextvarsmodule.c
…
_csv.c
[3.13] gh-145105: Fix crash in csv.reader with re-entrant iterator (GH-145106) (#148405)
2026-04-11 22:44:45 +00:00
_curses_panel.c
[3.13] gh-116946: fully implement GC protocol for _curses_panel.panel (GH-138333) (#138428)
2025-09-06 12:17:57 +02:00
_cursesmodule.c
[3.13] gh-137920: Fix semantically relevant typo in curses.window.attron (GH-137940) (GH-138507)
2025-10-07 22:22:18 +02:00
_datetimemodule.c
[3.13] gh-52551: Fix encoding issues in strftime() (GH-125193) (GH-125657)
2024-10-17 22:48:34 +03:00
_dbmmodule.c
…
_elementtree.c
[3.13] gh-143200: fix UAFs in Element.__{set,get}item__ when the element is concurrently mutated (GH-143226) (#143274)
2025-12-29 18:15:28 +00:00
_functoolsmodule.c
[3.13] gh-144475: Fix reference management in partial_repr (GH-145362) (#145882)
2026-03-24 02:30:45 +01:00
_gdbmmodule.c
[3.13] gh-140272: Fix memory leak in _gdbm.gdbm.clear() (GH-140274) (GH-140289)
2025-10-18 11:00:10 +00:00
_hashopenssl.c
[3.13] gh-145301: Fix double-free in hashlib initialization (GH-145321) (GH-145532)
2026-03-10 14:59:37 +01:00
_heapqmodule.c
[3.13] Fix comments for heapq.siftup_max (GH-135359) (#136233)
2025-07-03 10:15:01 +00:00
_interpchannelsmodule.c
[3.13] gh-140652: Fix a crash in _interpchannels.list_all() after clo…sing a channel (GH-143743) (GH-144953)
2026-02-18 14:18:39 +00:00
_interpqueuesmodule.c
[3.13] gh-140306: Fix memory leaks in cross-interpreter data handling (GH-140307) (GH-140357)
2025-10-20 10:13:15 +00:00
_interpreters_common.h
[3.13] gh-76785: Expand How Interpreter Channels Handle Interpreter Finalization (gh-121811)
2024-07-15 20:15:47 +00:00
_interpretersmodule.c
[3.13] gh-135839: Fix module_traverse and module_clear in subinterp modules (GH-135937) (GH-135943)
2025-08-04 14:34:47 +02:00
_json.c
[3.13] gh-143544: Fix possible use-after-free in the JSON decoder when JSONDecodeError disappears during raising it (GH-143561) (#143734)
2026-01-12 16:02:23 +00:00
_localemodule.c
[3.13] Fix unlikely potential reference leak in _locale._getdefaultlocale (GH-145250) (GH-145303)
2026-03-24 02:18:19 +00:00
_lsprof.c
[3.13] gh-132250: Clear error in lsprof callback when method descriptor raises an excep… (GH-132251) (#132281)
2025-04-08 17:19:40 -04:00
_lzmamodule.c
[3.13] gh-148395: Fix a possible UAF in {LZMA,BZ2,_Zlib}Decompressor (GH-148396) (#148479)
2026-04-13 01:35:24 +00:00
_math.h
…
_opcode.c
…
_operator.c
[3.13] gh-127065: Make methodcaller thread-safe in free threading build (GH-127109) (GH-127150)
2024-11-22 14:51:40 +00:00
_pickle.c
[3.13] gh-146059: Call fast_save_leave() in pickle save_frozenset() (GH-146173) (#146474)
2026-03-27 08:47:53 +00:00
_posixsubprocess.c
[3.13] gh-141659: Fix bad file descriptor error in subprocess on AIX (GH-141660) (#141828)
2025-11-21 18:10:01 +00:00
_queuemodule.c
[3.13] gh-145376: Fix refleak in queuemodule.c out-of-memory path (GH-145543) (#145621)
2026-03-08 13:32:39 +05:30
_randommodule.c
[3.13] Fix a compiler warning in _randommodule.c (GH-141058) (#141064)
2025-11-05 19:08:41 +00:00
_scproxy.c
…
_ssl_data_31.h
…
_ssl_data_111.h
…
_ssl_data_300.h
…
_ssl.c
[3.13] gh-146615: Fix format specifiers in extension modules (GH-146617) (GH-146652) (GH-146658)
2026-03-31 10:59:06 +00:00
_ssl.h
…
_stat.c
[3.13] gh-108765: fix comment about macro definitions in _stat.c post GH-108854 (GH-136027) (#136044)
2025-06-27 15:39:18 +00:00
_statisticsmodule.c
…
_struct.c
[3.13] gh-145633: Fix struct.pack('f') on s390x (#146422) (#146461)
2026-03-26 11:45:10 +00:00
_suggestions.c
[3.13] gh-131936: Strengthen check in _suggestions._generate_suggestions (GH-131945) (#131949)
2025-03-31 17:54:20 +00:00
_sysconfig.c
…
_testbuffer.c
…
_testcapi_feature_macros.inc
…
_testcapimodule.c
[3.13] gh-146615: Fix format specifiers in test cextensions (GH-146618) (GH-146653)
2026-03-31 08:38:59 +00:00
_testclinic_limited.c
…
_testclinic.c
[3.13] gh-132753: Argument Clinic: Fix support of c_default for the bool converter (GH-132754) (GH-132766)
2025-04-21 07:10:31 +00:00
_testexternalinspection.c
[3.13] gh-130052: Fix search_map_for_section() error handling (GH-132594) (#132598)
2025-04-16 14:21:58 +00:00
_testimportmultiple.c
…
_testinternalcapi.c
[3.13] gh-146615: Fix format specifiers in test cextensions (GH-146618) (GH-146653)
2026-03-31 08:38:59 +00:00
_testlimitedcapi.c
[3.13] gh-111495: Add PyFile tests (#129449) (#129477)
2025-01-30 20:29:27 +01:00
_testmultiphase.c
[3.13] gh-129405: Fix doc for Py_mod_multiple_interpreters default, and add test (GH-129406) (GH-130507)
2025-02-24 16:49:35 +01:00
_testsinglephase.c
[3.13] gh-144601: Avoid sharing exception objects raised in a PyInit function across multiple interpreters (GH-144602) (GH-144880)
2026-02-16 16:05:55 +00:00
_threadmodule.c
[3.13] gh-137017: Ensure Thread.is_alive() only returns False after the underlying OS thread exits (gh-137315) (gh-138917)
2025-09-15 14:28:05 +01:00
_tkinter.c
[3.13] gh-143310: fix crash in Tcl object conversion with concurrent mutations (GH-143321) (#143344)
2026-01-02 10:12:57 +00:00
_tracemalloc.c
[3.13] gh-128679: Fix tracemalloc.stop() race conditions (#128897)
2025-01-18 23:39:07 +00:00
_typingmodule.c
[3.13] gh-123448: Move _PyNoDefault_Type to the static types array (GH-123449) (#123450)
2024-08-28 18:57:28 -07:00
_uuidmodule.c
[3.13] gh-132710: only use stable _uuid.generate_time_safe() to deduce MAC address (GH-132901) (#134704)
2025-08-05 07:56:03 +00:00
_weakref.c
[3.13] gh-120974: Make _asyncio._leave_task atomic in the free-threaded build (GH-122139) (#122186)
2024-07-23 17:30:58 +00:00
_winapi.c
gh-128217: Validate the normalized_environment variable instead of the similarly named function (GH-128220)
2024-12-24 13:29:56 +00:00
_zoneinfo.c
[3.13] gh-145883: Fix two heap-buffer-overflows in _zoneinfo (GH-145885) (#148086)
2026-04-04 17:14:19 +01:00
addrinfo.h
…
arraymodule.c
[3.13] gh-142555: Fix null pointer dereference in array.__setitem__ via re-entrant __index__ (GH-142713) (#144397)
2026-02-02 21:06:59 +01:00
atexitmodule.c
[3.13] gh-142881: Fix concurrent and reentrant call of atexit.unregister() (GH-142901) (GH-143722)
2026-01-12 10:05:09 +00:00
binascii.c
[3.13] gh-145264: Do not ignore excess Base64 data after the first padded quad (GH-145267) (GH-146326) (GH-146348)
2026-03-24 00:52:20 +01:00
cmathmodule.c
…
config.c.in
…
errnomodule.c
…
faulthandler.c
[3.13] gh-130163: Fix crashes related to PySys_GetObject() (GH-130503) (GH-130556)
2025-02-25 22:50:26 +00:00
fcntlmodule.c
[3.13] gh-140615: Update docstrings in the fcntl module (GH-140619) (GH-141231) (GH-141232)
2025-11-08 11:50:17 +00:00
gc_weakref.txt
…
gcmodule.c
[3.13] gh-138659: Typo in the gc module docstring (GH-138660) (#138663)
2025-09-08 14:39:43 +00:00
getaddrinfo.c
…
getbuildinfo.c
…
getnameinfo.c
…
getpath_noop.c
…
getpath.c
[3.13] gh-121103: Put free-threaded libraries in lib/python3.14t (GH-121293) (#121631)
2024-07-11 21:00:28 +00:00
getpath.py
[3.13] gh-121103: Put free-threaded libraries in lib/python3.14t (GH-121293) (#121631)
2024-07-11 21:00:28 +00:00
grpmodule.c
[3.13] gh-126316: Make grp.getgrall() thread-safe: add a mutex (#127055) (#127104)
2024-11-26 12:01:50 +01:00
hashlib.h
[3.13] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134962)
2025-06-01 10:27:02 +02:00
itertoolsmodule.c
[3.13] gh-146613: Fix re-entrant use-after-free in itertools._grouper (GH-147962) (#148011)
2026-04-07 12:24:54 +02:00
ld_so_aix.in
…
main.c
[3.13] gh-129900: Fix SystemExit return codes when the REPL is started from the command line (GH-129901) (#131734)
2025-03-25 20:15:00 +00:00
makesetup
[3.13] gh-116622: Rename build variable MODULE_LDFLAGS back to LIBPYTHON (GH-122764) (GH-122842)
2024-08-09 14:45:04 -07:00
makexp_aix
…
mathmodule.c
[3.13] gh-132876: workaround broken ldexp() on Windows 10 (GH-133135) (#134685)
2025-05-25 22:39:34 -05:00
md5module.c
[3.13] gh-145376: Fix crashes in md5module.c (GH-145422) (#145611)
2026-03-06 22:24:20 +00:00
mmapmodule.c
[3.13] gh-138204: Forbid expansion of a shared anonymous mmap on Linux (GH-138220) (GH-138387)
2025-09-03 11:33:08 +03:00
overlapped.c
[3.13] gh-143249: Fix buffer leak when overlapped operation fails to start on windows (GH-143250) (#143796)
2026-01-13 13:53:41 +00:00
posixmodule.c
[3.13] gh-145335: Fix crash when passing -1 as fd in os.pathconf (GH-145390) (#145432)
2026-03-02 18:32:29 +00:00
posixmodule.h
…
pwdmodule.c
…
pyexpat.c
[3.13] gh-144984: Fix crash in Expat's ExternalEntityParserCreate error paths (GH-144992) (#146142)
2026-04-07 12:22:22 +02:00
readline.c
[3.13] gh-122431: Correct the non-negative error message in readline.append_history_file (GH-143075) (GH-143091)
2025-12-23 04:59:43 +00:00
README
…
resource.c
[3.13] gh-137044: Support large limit values in getrlimit() and setrlimit() (GH-137338) (GH-137507)
2025-08-07 09:37:02 +00:00
rotatingtree.c
[3.13] gh-116181: Remove Py_BUILD_CORE_BUILTIN and Py_BUILD_CORE_MODULE in rotatingtree.c (GH-121260) (#121307)
2024-07-03 07:59:26 +00:00
rotatingtree.h
…
selectmodule.c
[3.13] gh-121905: Consistently use "floating-point" instead of "floating point" (GH-121907) (GH-122012)
2024-07-19 09:13:08 +00:00
Setup
…
Setup.bootstrap.in
…
Setup.stdlib.in
[3.13] gh-111495: Add PyFile tests (#129449) (#129477)
2025-01-30 20:29:27 +01:00
sha1module.c
[3.13] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134962)
2025-06-01 10:27:02 +02:00
sha2module.c
[3.13] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134962)
2025-06-01 10:27:02 +02:00
sha3module.c
[3.13] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134962)
2025-06-01 10:27:02 +02:00
signalmodule.c
[3.13] gh-137490: Fix signal.sigwaitinfo() on NetBSD (GH-137523) (GH-138936)
2025-09-15 16:43:32 +00:00
socketmodule.c
[3.13] gh-144837: Improve documentation for more collection methods (GH-144841) (GH-146484)
2026-03-26 19:52:07 +00:00
socketmodule.h
[3.13] gh-132429: Fix support of Bluetooth sockets on NetBSD and DragonFly BSD (GH-132431) (GH-132458)
2025-04-13 01:22:41 +03:00
symtablemodule.c
[3.13] gh-139748: fix leaks in AC error paths when using unicode FS-b… (#139792)
2025-10-08 22:21:49 +05:30
syslogmodule.c
[3.13] gh-130163: Fix crashes related to PySys_GetObject() (GH-130503) (GH-130556)
2025-02-25 22:50:26 +00:00
termios.c
…
timemodule.c
[3.13] gh-130617 : fix time_clockid_converter on DragonFlyBSD (GH-130634) (#130666)
2025-02-28 08:19:45 +00:00
tkappinit.c
…
tkinter.h
…
unicodedata_db.h
…
unicodedata.c
[3.13] gh-88091: Fix unicodedata.decomposition() for Hangul Syllables (GH-144993) (GH-145190)
2026-02-25 00:27:40 +02:00
unicodename_db.h
[3.13] gh-80667: Fix lookup for Tangut ideographs in unicodedata (GH-144789) (GH-144871) (GH-144875)
2026-02-16 15:02:01 +00:00
winreparse.h
…
xxlimited_35.c
…
xxlimited.c
[3.13] gh-134160: Use PyModuleDef.m_free in the example module xxlimited (GH-135174) (GH-135214)
2025-06-07 11:03:32 +02:00
xxmodule.c
[3.13] gh-122040: reword Modules/xxmodule.c module-level comment (GH-132201) (#132207)
2025-04-07 08:27:34 +00:00
xxsubtype.c
…
zlibmodule.c
[3.13] gh-148395: Fix a possible UAF in {LZMA,BZ2,_Zlib}Decompressor (GH-148396) (#148479)
2026-04-13 01:35:24 +00:00

README 

Source files for standard library extension modules,
and former extension modules that are now builtin modules.
Reference in New Issue View Git Blame Copy Permalink