Skip to content

gh-151307: Bound zipfile reads for forged compressed sizes #196572

gh-151307: Bound zipfile reads for forged compressed sizes

gh-151307: Bound zipfile reads for forged compressed sizes #196572

Triggered via pull request June 15, 2026 16:02
Status Cancelled
Total duration 1h 0m 58s
Artifacts 2

build.yml

on: pull_request
Change detection  /  Create context from changed files
11s
Change detection / Create context from changed files
Matrix: Address sanitizer
Matrix: build-macos
Matrix: build-san
Matrix: Ubuntu SSL tests
Matrix: build-ubuntu
Matrix: build-windows-msi
Waiting for pending jobs
Matrix: build-windows
Matrix: cifuzz
Docs  /  Doctest
7m 17s
Docs / Doctest
Docs  /  Check EPUB
2m 21s
Docs / Check EPUB
Check if Autoconf files are up to date
26s
Check if Autoconf files are up to date
Check if generated files are up to date
3m 58s
Check if generated files are up to date
C API Docs  /  Check if all C APIs are documented
13s
C API Docs / Check if all C APIs are documented
iOS
19m 45s
iOS
Emscripten  /  build and test
17m 16s
Emscripten / build and test
WASI  /  build and test
5m 20s
WASI / build and test
Hypothesis tests on Ubuntu
9m 43s
Hypothesis tests on Ubuntu
Cross build Linux
4m 20s
Cross build Linux
Matrix: build-android
Docs  /  ...  /  Check for removed HTML IDs
2m 26s
Docs / Check for removed HTML IDs / Check for removed HTML IDs
All required checks pass
3s
All required checks pass
Fit to window
Zoom out
Zoom in

Annotations

5 errors and 7 warnings
Docs / Docs
Process completed with exit code 2.
Docs / Check EPUB
Process completed with exit code 1.
Sanitizers / TSan (free-threading)
The job has exceeded the maximum execution time of 1h0m0s
Sanitizers / TSan (free-threading)
The operation was canceled.
All required checks pass
Process completed with exit code 1.
Hypothesis tests on Ubuntu
No files were found with the provided path: /home/runner/work/cpython/cpython-builddir/.hypothesis/examples/. No artifacts will be uploaded.
macOS / build and test (macos-26)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-26)
The following taps are not trusted: aws/tap azure/bicep Homebrew will ignore formulae, casks and commands from these taps when `HOMEBREW_REQUIRE_TAP_TRUST` is set. This will become the default in Homebrew 6.0.0 or 5.2.0, whichever comes first. Enable trust checks now with: export HOMEBREW_REQUIRE_TAP_TRUST=1 Trust specific formulae, casks or commands with: brew trust --formula <user>/<tap>/<formula> brew trust --cask <user>/<tap>/<cask> brew trust --command <user>/<tap>/<command> or trust installed formulae from these taps with: brew trust --formula azure/bicep/bicep You can trust all formulae, casks and commands from these taps with: brew trust aws/tap azure/bicep Prefer trusting only the specific formulae, casks or commands you need. Untap them with: brew untap aws/tap azure/bicep To keep allowing them by default during the transition: export HOMEBREW_NO_REQUIRE_TAP_TRUST=1 This is not recommended and will be removed in a later release.
macOS (free-threading) / build and test (macos-26)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS (free-threading) / build and test (macos-26)
The following taps are not trusted: aws/tap azure/bicep Homebrew will ignore formulae, casks and commands from these taps when `HOMEBREW_REQUIRE_TAP_TRUST` is set. This will become the default in Homebrew 6.0.0 or 5.2.0, whichever comes first. Enable trust checks now with: export HOMEBREW_REQUIRE_TAP_TRUST=1 Trust specific formulae, casks or commands with: brew trust --formula <user>/<tap>/<formula> brew trust --cask <user>/<tap>/<cask> brew trust --command <user>/<tap>/<command> or trust installed formulae from these taps with: brew trust --formula azure/bicep/bicep You can trust all formulae, casks and commands from these taps with: brew trust aws/tap azure/bicep Prefer trusting only the specific formulae, casks or commands you need. Untap them with: brew untap aws/tap azure/bicep To keep allowing them by default during the transition: export HOMEBREW_NO_REQUIRE_TAP_TRUST=1 This is not recommended and will be removed in a later release.
macOS / build and test (macos-26-intel)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-26-intel)
The following taps are not trusted: aws/tap azure/bicep Homebrew will ignore formulae, casks and commands from these taps when `HOMEBREW_REQUIRE_TAP_TRUST` is set. This will become the default in Homebrew 6.0.0 or 5.2.0, whichever comes first. Enable trust checks now with: export HOMEBREW_REQUIRE_TAP_TRUST=1 Trust specific formulae, casks or commands with: brew trust --formula <user>/<tap>/<formula> brew trust --cask <user>/<tap>/<cask> brew trust --command <user>/<tap>/<command> or trust installed formulae from these taps with: brew trust --formula azure/bicep/bicep You can trust all formulae, casks and commands from these taps with: brew trust aws/tap azure/bicep Prefer trusting only the specific formulae, casks or commands you need. Untap them with: brew untap aws/tap azure/bicep To keep allowing them by default during the transition: export HOMEBREW_NO_REQUIRE_TAP_TRUST=1 This is not recommended and will be removed in a later release.

Artifacts

Produced during runtime
Name Size Digest
UBSan-logs-default
1.52 KB
sha256:741f9115584aa654877c9ec7e0a9c6359175d0019c0ebf81ee0799acd0e2d368
html-ids-head.json.gz
120 KB
sha256:86a38a33855ab837072f8352ab0b4e4c8285b4d58fa9c70dbc17026a6ce53657