PublicArchive/cpython
2
0
Fork 0
mirror of https://github.com/python/cpython.git synced 2026-05-06 20:51:17 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
b988157e87e08020a1fd54d45bbe669d006cd049
cpython/Modules
T
History
Miss Islington (bot) 6a5f79c8d7 [3.14] gh-148395: Fix a possible UAF in {LZMA,BZ2,_Zlib}Decompressor (GH-148396) (#148480) 
gh-148395: Fix a possible UAF in `{LZMA,BZ2,_Zlib}Decompressor` (GH-148396)

Fix dangling input pointer after `MemoryError` in _lzma/_bz2/_ZlibDecompressor.decompress
(cherry picked from commit 8fc66aef6d)

Co-authored-by: Stan Ulbrych <stan@python.org>
2026-04-13 01:40:54 +00:00
..
_ctypes
[3.14] gh-144100: Fix crash for POINTER(str) used in ctypes argtypes (GH-144108) (#144244)
2026-01-26 12:53:20 +00:00
_decimal
[3.14] gh-143331: Schedule to remove format "N" for Decimal (GH-143372) (#143476)
2026-01-06 15:58:29 +02:00
_hacl
[3.14] gh-140120: Refresh HACL* to fix an hmac memory leak (GH-140188) (#140192)
2025-10-16 20:53:12 -07:00
_io
[3.14] gh-144777: Fix data races in IncrementalNewlineDecoder (gh-144971) (#145143)
2026-02-23 15:25:03 +00:00
_multiprocessing
gh-131525: Cache the result of tuple_hash (#131529)
2025-03-27 09:57:06 -04:00
_sqlite
[3.14] gh-146090: fix memory management of internal sqlite3 callback contexts (GH-146569) (#146595)
2026-03-29 15:15:05 +02:00
_sre
[3.14] gh-116738: Fix thread-safety issue in re module for free threading (gh-141923) (gh-141990)
2025-11-26 21:08:39 +00:00
_ssl
[3.14] gh-134698: Hold a lock when the thread state is detached in ssl (GH-134724) (GH-137107)
2025-10-07 18:49:22 +00:00
_testcapi
[3.14] gh-143050: Correct PyLong_FromString() to use _PyLong_Negate() (GH-145901) (#147331)
2026-03-31 16:14:12 +02:00
_testinternalcapi
[3.14] gh-144513: Skip critical section locking during stop-the-world (gh-144524) (#145570)
2026-03-06 12:00:17 -05:00
_testlimitedcapi
[3.14] gh-132657: add regression test for PySet_Contains with unhashable type (GH-141411) (#141468)
2025-11-12 15:49:09 +00:00
_xxtestfuzz
gh-111178: remove redundant casts for functions with correct signatures (#131673)
2025-04-01 17:18:11 +02:00
_zstd
[3.14] gh-146579: _zstd: Fix decompression options dict error message (GH-146577) (#146611)
2026-03-30 08:26:45 +00:00
cjkcodecs
[3.14] gh-101828: Fix jisx0213 codecs removing null characters (gh-139340) (gh-140110)
2025-10-14 14:36:05 +00:00
clinic
[3.14] gh-144545: Improve handling of default values in Argument Clinic (GH-146016) (GH-146052)
2026-03-17 10:55:15 +00:00
expat
[3.14] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) (#146603)
2026-03-29 17:31:02 +00:00
_abc.c
…
_asynciomodule.c
[3.14] gh-148274: properly handle result from PyObject_VisitManagedDict (GH-148275) (#148295)
2026-04-09 13:49:09 +00:00
_bisectmodule.c
…
_bz2module.c
[3.14] gh-148395: Fix a possible UAF in {LZMA,BZ2,_Zlib}Decompressor (GH-148396) (#148480)
2026-04-13 01:40:54 +00:00
_codecsmodule.c
GH-131238: Core header refactor (GH-131250)
2025-03-17 09:19:04 +00:00
_collectionsmodule.c
[3.14] gh-145492: Fix defaultdict __repr__ infinite recursion (GH-145659) (GH-145747)
2026-03-12 10:45:31 +01:00
_csv.c
[3.14] gh-145105: Fix crash in csv.reader with re-entrant iterator (GH-145106) (#148404)
2026-04-11 22:46:26 +00:00
_curses_panel.c
[3.14] gh-116946: fully implement GC protocol for _curses_panel.panel (GH-138333) (#138427)
2025-09-06 21:20:35 +03:00
_cursesmodule.c
[3.14] gh-137920: Fix semantically relevant typo in curses.window.attron (#137940) (GH-138506)
2025-10-07 22:21:41 +02:00
_datetimemodule.c
[3.14] gh-139774: use relaxed atomics for datetime hashes (GH-139775) (#139780)
2025-10-08 21:09:09 +05:30
_dbmmodule.c
[3.14] gh-116738: Add critical section to dbm/gdbm context manager (gh-140391) (gh-140459)
2025-10-22 15:44:09 +00:00
_elementtree.c
[3.14] gh-143200: fix UAFs in Element.__{set,get}item__ when the element is concurrently mutated (GH-143226) (#143273)
2025-12-29 17:57:54 +00:00
_functoolsmodule.c
[3.14] gh-145446: Add critical section in functools module for PyDict_Next (GH-145487) (GH-145879)
2026-03-13 13:21:04 +01:00
_gdbmmodule.c
[3.14] gh-116738: Add critical section to dbm/gdbm context manager (gh-140391) (gh-140459)
2025-10-22 15:44:09 +00:00
_hashopenssl.c
[3.14] gh-145301: Fix double-free in hashlib and hmac module initialization (GH-145321) (#145523)
2026-03-05 04:13:02 +00:00
_heapqmodule.c
[3.14] Fix comments for heapq.siftup_max (GH-135359) (#136232)
2025-07-03 10:17:10 +00:00
_interpchannelsmodule.c
[3.14] gh-140652: Fix a crash in _interpchannels.list_all() after closing a channel (GH-143743) (GH-144954)
2026-02-18 13:29:34 +00:00
_interpqueuesmodule.c
[3.14] gh-140306: Fix memory leaks in cross-interpreter data handling (GH-140307) (GH-140338)
2025-10-19 19:53:36 +00:00
_interpreters_common.h
[3.14] gh-132775: Use _PyObject_GetXIData (With Fallback) (gh-134507)
2025-05-22 07:21:05 -06:00
_interpretersmodule.c
[3.14] Revert "gh-112068: C API: Add support of nullable arguments in PyArg_Parse (GH-121303)" (GH-136991) (#137006)
2025-07-22 19:16:31 +03:00
_json.c
[3.14] gh-143196: Fix crash in non-standard use of internal JSON encoder object (GH-143618) (GH-143748)
2026-01-12 18:50:40 +00:00
_localemodule.c
[3.14] Fix unlikely potential reference leak in _locale._getdefaultlocale (GH-145250) (GH-145302)
2026-02-27 08:31:11 +00:00
_lsprof.c
[3.14] gh-116738: make cProfile module thread-safe (GH-138229) (#138575)
2025-10-07 18:51:22 +00:00
_lzmamodule.c
[3.14] gh-148395: Fix a possible UAF in {LZMA,BZ2,_Zlib}Decompressor (GH-148396) (#148480)
2026-04-13 01:40:54 +00:00
_math.h
…
_opcode.c
[3.14] gh-135755: Move SPECIAL_ constants to a private header (GH-135922) (GH-135926)
2025-06-25 13:36:46 +02:00
_operator.c
gh-131238: Add explicit includes to pycore headers (#131257)
2025-03-17 12:32:43 +01:00
_pickle.c
[3.14] gh-146059: Call fast_save_leave() in pickle save_frozenset() (GH-146173) (#146473)
2026-03-26 17:02:20 +00:00
_posixsubprocess.c
[3.14] gh-141659: Fix bad file descriptor error in subprocess on AIX (GH-141660) (GH-141738)
2025-11-19 08:05:01 +00:00
_queuemodule.c
[3.14] gh-145376: Fix refleak in queuemodule.c out-of-memory path (GH-145543) (#145622)
2026-03-08 13:32:51 +05:30
_randommodule.c
[3.14] Fix a compiler warning in _randommodule.c (GH-141058) (#141063)
2025-11-05 19:10:32 +00:00
_remote_debugging_module.c
[3.14] gh-146615: Fix format specifiers in extension modules (GH-146617) (#147704)
2026-04-01 15:12:44 +02:00
_scproxy.c
…
_ssl_data_35.h
[3.14] gh-144551: Update CI to use latest OpenSSL versions (GH-144794) (#144799)
2026-02-13 22:31:27 +02:00
_ssl_data_111.h
gh-131423: Update OpenSSL data to 3.4.1 on Linux (#131618)
2025-04-25 10:26:58 +02:00
_ssl_data_300.h
…
_ssl_data_340.h
gh-131423: Update OpenSSL data to 3.4.1 on Linux (#131618)
2025-04-25 10:26:58 +02:00
_ssl.c
[3.14] gh-146615: Fix format specifiers in extension modules (GH-146617) (GH-146652)
2026-03-31 10:07:09 +00:00
_ssl.h
…
_stat.c
[3.14] gh-108765: fix comment about macro definitions in _stat.c post GH-108854 (GH-136027) (#136043)
2025-06-27 15:40:34 +00:00
_statisticsmodule.c
…
_struct.c
[3.14] gh-145633: Fix struct.pack('f') on s390x (GH-146422) (#146460)
2026-03-26 11:38:42 +00:00
_suggestions.c
gh-131936: Strengthen check in _suggestions._generate_suggestions (#131945)
2025-03-31 19:30:29 +02:00
_sysconfig.c
gh-127405: Add ABIFLAGS to sysconfig variables on Windows (GH-131799)
2025-04-11 16:19:03 +01:00
_testbuffer.c
gh-111178: fix UBSan failures for Modules/_testbuffer.c (#131612)
2025-03-24 10:46:25 +01:00
_testcapi_feature_macros.inc
…
_testcapimodule.c
[3.14] gh-148274: properly handle result from PyObject_VisitManagedDict (GH-148275) (#148295)
2026-04-09 13:49:09 +00:00
_testclinic_limited.c
…
_testclinic.c
[3.14] gh-144545: Improve handling of default values in Argument Clinic (GH-146016) (GH-146052)
2026-03-17 10:55:15 +00:00
_testimportmultiple.c
…
_testinternalcapi.c
[3.14] gh-146615: Fix format specifiers in test cextensions (GH-146618) (GH-146649)
2026-03-31 08:31:05 +00:00
_testlimitedcapi.c
…
_testmultiphase.c
gh-111178: fix UBSan failures for Modules/_testmultiphase.c (#131615)
2025-03-24 10:59:30 +01:00
_testsinglephase.c
[3.14] gh-144601: Avoid sharing exception objects raised in a PyInit function across multiple interpreters (GH-144602) (GH-144633)
2026-02-16 10:37:46 -05:00
_threadmodule.c
[3.14] gh-143191: Use _PyOS_MIN_STACK_SIZE in _thread.stack_size() (GH-143601) (#143611)
2026-01-09 15:34:39 +00:00
_tkinter.c
[3.14] gh-143310: fix crash in Tcl object conversion with concurrent mutations (GH-143321) (#143343)
2026-01-02 10:17:13 +00:00
_tracemalloc.c
…
_typesmodule.c
GH-118761: Expose more core interpreter types in `_types` (#132103)
2025-04-05 18:11:07 +00:00
_typingmodule.c
gh-105499: Merge typing.Union and types.UnionType (#105511)
2025-03-04 11:44:19 -08:00
_uuidmodule.c
[3.14] gh-132710: only use stable _uuid.generate_time_safe() to deduce MAC address (GH-132901) (#134697)
2025-05-26 10:45:36 +00:00
_weakref.c
…
_winapi.c
GH-131296: Fix incompatible pointer type warning in _winapi.c (GH-131600)
2025-03-31 17:33:55 +01:00
_zoneinfo.c
[3.14] gh-145883: Fix two heap-buffer-overflows in _zoneinfo (GH-145885) (#148087)
2026-04-04 17:13:13 +01:00
addrinfo.h
gh-114917: add support for AI_NUMERICSERV in getaddrinfo emulation (#114918)
2025-03-18 11:26:51 +01:00
arraymodule.c
[3.14] gh-142555: Fix null pointer dereference in array.__setitem__ via re-entrant __index__ (GH-142713) (#144396)
2026-02-03 11:38:50 +01:00
atexitmodule.c
[3.14] gh-144986: Fix memory leak in atexit.register() (GH-144987) (#145020)
2026-03-16 13:56:05 +05:30
binascii.c
[3.14] gh-145264: Do not ignore excess Base64 data after the first padded quad (GH-145267) (GH-146326)
2026-03-24 00:20:26 +01:00
blake2module.c
[3.14] gh-144545: Improve handling of default values in Argument Clinic (GH-146016) (GH-146052)
2026-03-17 10:55:15 +00:00
cmathmodule.c
[3.14] gh-116738: Statically initialize special constants in cmath module (gh-142161) (gh-142261)
2025-12-04 14:51:55 +00:00
config.c.in
gh-128384: Use a context variable for warnings.catch_warnings (gh-130010)
2025-04-09 16:18:54 -07:00
errnomodule.c
…
faulthandler.c
[3.14] gh-137185: Fix _Py_DumpStack() async signal safety (gh-137187) (gh-137206)
2025-10-07 18:11:46 +00:00
fcntlmodule.c
[3.14] gh-140615: Update docstrings in the fcntl module (GH-140619) (GH-141231)
2025-11-08 11:16:45 +00:00
gc_weakref.txt
…
gcmodule.c
[3.14] gh-138659: Typo in the gc module docstring (GH-138660) (#138662)
2025-09-08 14:41:34 +00:00
getaddrinfo.c
gh-114917: Fix typo in getaddrinfo emulation (#131413)
2025-03-18 14:31:13 +01:00
getbuildinfo.c
gh-100388: Change undefined __DATE__ to the Unix epoch (#100389)
2025-03-03 14:59:46 +01:00
getnameinfo.c
Replace K&R function declarations with ANSI declarations (#114818)
2025-03-11 13:06:36 +01:00
getpath_noop.c
…
getpath.c
GH-131296: Avoid invalid signed char comparison in getpath.c assertion (GH-131594)
2025-04-22 14:06:30 +01:00
getpath.py
[3.14] gh-135773: have pyvenv.cfg without home key anchor a venv and deduce home (GH-135831) (#136287)
2025-07-05 00:36:12 +10:00
grpmodule.c
[3.14] gh-116738: Make grp module thread-safe (GH-135434) (#136658)
2025-07-15 11:03:33 +05:30
hashlib.h
[3.14] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134961)
2025-06-01 10:26:56 +02:00
hmacmodule.c
[3.14] gh-145376: Fix crashes in md5module.c and hmacmodule.c (GH-145422) (#145610)
2026-03-06 21:06:32 +00:00
itertoolsmodule.c
[3.14] gh-146613: Fix re-entrant use-after-free in itertools._grouper (GH-147962) (#148010)
2026-04-06 18:23:08 +03:00
ld_so_aix.in
…
main.c
[3.14] gh-145376: Fix various reference leaks (GH-145377) (GH-145712)
2026-03-10 16:31:02 +01:00
makesetup
gh-131298: eliminate HACL* static libraries for cryptographic modules (GH-132438)
2025-04-20 17:40:17 +00:00
makexp_aix
…
mathmodule.c
[3.14] gh-132876: workaround broken ldexp() on Windows 10 (GH-133135) (#134684)
2025-05-25 22:23:45 -05:00
md5module.c
[3.14] gh-145376: Fix crashes in md5module.c and hmacmodule.c (GH-145422) (#145610)
2026-03-06 21:06:32 +00:00
mmapmodule.c
[3.14] gh-116738: make mmap module thread-safe (GH-139237) (#139825)
2025-10-09 20:19:03 +05:30
overlapped.c
[3.14] gh-143249: Fix buffer leak when overlapped operation fails to start on windows (GH-143250) (#143795)
2026-01-13 13:57:54 +00:00
posixmodule.c
[3.14] gh-144545: Improve handling of default values in Argument Clinic (GH-146016) (GH-146052)
2026-03-17 10:55:15 +00:00
posixmodule.h
…
pwdmodule.c
…
pyexpat.c
[3.14] gh-144984: Fix crash in Expat's ExternalEntityParserCreate error paths (GH-144992) (#146019)
2026-03-17 01:49:39 +01:00
readline.c
[3.14] gh-122431: Correct the non-negative error message in readline.append_history_file (GH-143075) (GH-143090)
2025-12-23 05:01:41 +00:00
README
…
resource.c
[3.14] gh-137044: Support large limit values in getrlimit() and setrlimit() (GH-137338) (#137506)
2025-10-07 20:43:12 +02:00
rotatingtree.c
…
rotatingtree.h
…
selectmodule.c
gh-132987: Support __index__() in the select.kqueue_event constructor (GH-133094)
2025-04-29 13:55:14 +00:00
Setup
GH-132983: Build `_zstd` on Windows (#133366)
2025-05-06 00:58:47 +01:00
Setup.bootstrap.in
[3.14] gh-136421: Load _datetime static types during interpreter initialization (GH-136583) (GH-136943)
2025-07-21 19:23:05 -04:00
Setup.stdlib.in
[3.14] gh-136421: Load _datetime static types during interpreter initialization (GH-136583) (GH-136943)
2025-07-21 19:23:05 -04:00
sha1module.c
[3.14] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134961)
2025-06-01 10:26:56 +02:00
sha2module.c
[3.14] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134961)
2025-06-01 10:26:56 +02:00
sha3module.c
[3.14] gh-134696: align OpenSSL and HACL*-based hash functions constructors AC signatures (GH-134713) (#134961)
2025-06-01 10:26:56 +02:00
signalmodule.c
[3.14] gh-137490: Fix signal.sigwaitinfo() on NetBSD (GH-137523) (GH-138935)
2025-10-08 14:33:30 +02:00
socketmodule.c
[3.14] gh-144837: Improve documentation for more collection methods (GH-144841) (GH-146483)
2026-03-26 19:55:25 +00:00
socketmodule.h
[3.14] GH-131296: Fix clang-cl warning on Windows in socketmodule.h (GH-131832) (GH-146340)
2026-03-24 00:27:01 +01:00
symtablemodule.c
[3.14] gh-139748: fix leaks in AC error paths when using unicode FS-b… (#139789)
2025-10-08 22:16:21 +05:30
syslogmodule.c
…
termios.c
…
timemodule.c
…
tkappinit.c
…
tkinter.h
…
unicodedata_db.h
…
unicodedata.c
[3.14] gh-88091: Fix unicodedata.decomposition() for Hangul Syllables (GH-144993) (GH-145189)
2026-02-25 00:27:09 +02:00
unicodename_db.h
[3.14] gh-80667: Fix lookup for Tangut ideographs in unicodedata (GH-144789) (GH-144871)
2026-02-16 14:25:43 +02:00
winreparse.h
…
xxlimited_35.c
gh-111178: Fix function signatures for multiple tests (#131496)
2025-03-20 12:27:03 +01:00
xxlimited.c
[3.14] gh-134160: Add more comments for the xxlimited module (GH-140214) (GH-140664)
2025-10-28 10:24:11 +01:00
xxmodule.c
gh-122040: reword Modules/xxmodule.c module-level comment (#132201)
2025-04-07 08:03:03 +00:00
xxsubtype.c
…
zlibmodule.c
[3.14] gh-148395: Fix a possible UAF in {LZMA,BZ2,_Zlib}Decompressor (GH-148396) (#148480)
2026-04-13 01:40:54 +00:00

README 

Source files for standard library extension modules,
and former extension modules that are now builtin modules.
Reference in New Issue View Git Blame Copy Permalink