gh-156002: Keep reading through third-party zipfile decompressors by rasmusfaber · Pull Request #157180 · python/cpython · GitHub

github.com

GitHub CopilotWrite better code with AI | MCP RegistryIntegrate external tools | ActionsAutomate any workflow | CodespacesInstant dev environments | IssuesPlan and track work | Code ReviewManage code changes | Code QualityEnforce quality at merge | Why GitHub | Marketplace | View all features | Enterprises | Small and medium teams | Startups | View all use cases | View all industries | View all solutions | AI | Software Development | DevOps | Security | View all topics | Customer stories | Events & webinars | Ebooks & reports | Business insights | Trust center | Partners | View all resources

Tin mới

rasmusfaber:gh-156002-third-party-decompressors

GitHub CopilotWrite better code with AI

GitHub Copilot appDirect agents from issue to merge

ActionsAutomate any workflow

CodespacesInstant dev environments

IssuesPlan and track work

Code ReviewManage code changes

Code QualityEnforce quality at merge

GitHub Advanced SecurityFind and fix vulnerabilities

Code securitySecure your code as you build

Secret protectionStop leaks before they start

View all use cases

Financial services

View all industries

Software Development

GitHub SponsorsFund open source developers

Copilot for BusinessEnterprise-grade AI features

Premium SupportEnterprise-grade 24/7 support

Pull requests 2.6k

Security and quality 0

gh-156002: Bound zipfile decompression for bzip2/LZMA/Zstandard #156003

Memory exhaustion via crafted zip file #156002

: Keep reading through third-party zipfile decompressors

python-cla-bot Bot commented Sep 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

There was an error while loading. Please reload this page.

Rewind in the third-party decompressor test; wrap two long lines

Rename tests; check that the "compression" happened

Make LZMADecompressor.needs_input public; simplify implementation

Fix typos and other nits.

bedevere-app Bot commented Sep 10, 2026

GH-157268 is a backport of this pull request to the 3.15 branch.

Tin khác