Skip to content

gh-151307: Bound zipfile reads for forged compressed sizes #196567

gh-151307: Bound zipfile reads for forged compressed sizes

gh-151307: Bound zipfile reads for forged compressed sizes #196567

Triggered via pull request June 15, 2026 15:15
Status Cancelled
Total duration 13m 11s
Artifacts 2

build.yml

on: pull_request
Change detection  /  Create context from changed files
14s
Change detection / Create context from changed files
Matrix: Address sanitizer
Matrix: build-macos
Matrix: build-san
Matrix: Ubuntu SSL tests
Matrix: build-ubuntu
Matrix: build-windows-msi
Waiting for pending jobs
Matrix: build-windows
Matrix: cifuzz
Docs  /  Doctest
7m 4s
Docs / Doctest
Docs  /  Check EPUB
2m 24s
Docs / Check EPUB
Check if Autoconf files are up to date
25s
Check if Autoconf files are up to date
Check if generated files are up to date
4m 11s
Check if generated files are up to date
C API Docs  /  Check if all C APIs are documented
8s
C API Docs / Check if all C APIs are documented
iOS
12m 25s
iOS
Emscripten  /  build and test
12m 19s
Emscripten / build and test
WASI  /  build and test
5m 33s
WASI / build and test
Hypothesis tests on Ubuntu
9m 45s
Hypothesis tests on Ubuntu
Cross build Linux
4m 11s
Cross build Linux
Matrix: build-android
Docs  /  ...  /  Check for removed HTML IDs
2m 9s
Docs / Check for removed HTML IDs / Check for removed HTML IDs
All required checks pass
5s
All required checks pass
Fit to window
Zoom out
Zoom in

Annotations

78 errors and 7 warnings
Docs / Docs
Process completed with exit code 2.
Docs / Check EPUB
Process completed with exit code 1.
WASI / build and test
Process completed with exit code 2.
Ubuntu (free-threading) / build and test (ubuntu-24.04-arm)
Process completed with exit code 2.
CIFuzz / python3-libraries (address)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
CIFuzz / python3-libraries (address)
Path does not exist: cifuzz-sarif/results.sarif
CIFuzz / python3-libraries (address)
The operation was canceled.
CIFuzz / cpython3 (memory)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
CIFuzz / cpython3 (memory)
Path does not exist: cifuzz-sarif/results.sarif
CIFuzz / cpython3 (memory)
The operation was canceled.
Windows (free-threading) / Build and test (x64, tail-call)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Windows (free-threading) / Build and test (x64, tail-call)
The operation was canceled.
CIFuzz / cpython3 (undefined)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
CIFuzz / cpython3 (undefined)
Path does not exist: cifuzz-sarif/results.sarif
CIFuzz / cpython3 (undefined)
The operation was canceled.
Windows / Build and test (x64, tail-call)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Windows / Build and test (x64, tail-call)
The operation was canceled.
Windows (free-threading) / Build and test (x64, switch-case)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Windows (free-threading) / Build and test (x64, switch-case)
The operation was canceled.
Windows / Build and test (Win32, switch-case)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Windows / Build and test (Win32, switch-case)
The operation was canceled.
Windows / Build and test (x64, switch-case)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Windows / Build and test (x64, switch-case)
The operation was canceled.
Windows / Build and test (arm64, switch-case)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Windows / Build and test (arm64, switch-case)
The operation was canceled.
Ubuntu (bolt) / build and test (ubuntu-24.04)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Ubuntu (bolt) / build and test (ubuntu-24.04)
The operation was canceled.
Windows (free-threading) / Build and test (arm64, switch-case)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Windows (free-threading) / Build and test (arm64, switch-case)
The operation was canceled.
Address sanitizer (ubuntu-24.04)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Address sanitizer (ubuntu-24.04)
The operation was canceled.
Ubuntu / build and test (ubuntu-24.04)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Ubuntu / build and test (ubuntu-24.04)
The operation was canceled.
Android (x86_64)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Android (x86_64)
The operation was canceled.
Ubuntu / build and test (ubuntu-24.04-arm)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Ubuntu / build and test (ubuntu-24.04-arm)
The operation was canceled.
Emscripten / build and test
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Emscripten / build and test
The operation was canceled.
Sanitizers / UBSan
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Sanitizers / UBSan
The operation was canceled.
Sanitizers / TSan
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Ubuntu (free-threading) / build and test (ubuntu-24.04)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Sanitizers / TSan
The operation was canceled.
Ubuntu (free-threading) / build and test (ubuntu-24.04)
The operation was canceled.
Sanitizers / TSan (free-threading)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Sanitizers / TSan (free-threading)
The operation was canceled.
macOS / build and test (macos-26)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
macOS / build and test (macos-26)
The operation was canceled.
iOS
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
iOS
The operation was canceled.
macOS / build and test (macos-26-intel)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
macOS / build and test (macos-26-intel)
The operation was canceled.
macOS (free-threading) / build and test (macos-26)
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
macOS (free-threading) / build and test (macos-26)
The operation was canceled.
All required checks pass
Process completed with exit code 1.
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Tests
Canceling since a higher priority waiting request for Tests-rohitjavvadi-fix-zipfile-bounded-read exists
Hypothesis tests on Ubuntu
No files were found with the provided path: /home/runner/work/cpython/cpython-builddir/.hypothesis/examples/. No artifacts will be uploaded.
macOS / build and test (macos-26)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-26)
The following taps are not trusted: aws/tap azure/bicep Homebrew will ignore formulae, casks and commands from these taps when `HOMEBREW_REQUIRE_TAP_TRUST` is set. This will become the default in Homebrew 6.0.0 or 5.2.0, whichever comes first. Enable trust checks now with: export HOMEBREW_REQUIRE_TAP_TRUST=1 Trust specific formulae, casks or commands with: brew trust --formula <user>/<tap>/<formula> brew trust --cask <user>/<tap>/<cask> brew trust --command <user>/<tap>/<command> or trust installed formulae from these taps with: brew trust --formula azure/bicep/bicep You can trust all formulae, casks and commands from these taps with: brew trust aws/tap azure/bicep Prefer trusting only the specific formulae, casks or commands you need. Untap them with: brew untap aws/tap azure/bicep To keep allowing them by default during the transition: export HOMEBREW_NO_REQUIRE_TAP_TRUST=1 This is not recommended and will be removed in a later release.
macOS / build and test (macos-26-intel)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-26-intel)
The following taps are not trusted: aws/tap azure/bicep Homebrew will ignore formulae, casks and commands from these taps when `HOMEBREW_REQUIRE_TAP_TRUST` is set. This will become the default in Homebrew 6.0.0 or 5.2.0, whichever comes first. Enable trust checks now with: export HOMEBREW_REQUIRE_TAP_TRUST=1 Trust specific formulae, casks or commands with: brew trust --formula <user>/<tap>/<formula> brew trust --cask <user>/<tap>/<cask> brew trust --command <user>/<tap>/<command> or trust installed formulae from these taps with: brew trust --formula azure/bicep/bicep You can trust all formulae, casks and commands from these taps with: brew trust aws/tap azure/bicep Prefer trusting only the specific formulae, casks or commands you need. Untap them with: brew untap aws/tap azure/bicep To keep allowing them by default during the transition: export HOMEBREW_NO_REQUIRE_TAP_TRUST=1 This is not recommended and will be removed in a later release.
macOS (free-threading) / build and test (macos-26)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS (free-threading) / build and test (macos-26)
The following taps are not trusted: aws/tap azure/bicep Homebrew will ignore formulae, casks and commands from these taps when `HOMEBREW_REQUIRE_TAP_TRUST` is set. This will become the default in Homebrew 6.0.0 or 5.2.0, whichever comes first. Enable trust checks now with: export HOMEBREW_REQUIRE_TAP_TRUST=1 Trust specific formulae, casks or commands with: brew trust --formula <user>/<tap>/<formula> brew trust --cask <user>/<tap>/<cask> brew trust --command <user>/<tap>/<command> or trust installed formulae from these taps with: brew trust --formula azure/bicep/bicep You can trust all formulae, casks and commands from these taps with: brew trust aws/tap azure/bicep Prefer trusting only the specific formulae, casks or commands you need. Untap them with: brew untap aws/tap azure/bicep To keep allowing them by default during the transition: export HOMEBREW_NO_REQUIRE_TAP_TRUST=1 This is not recommended and will be removed in a later release.

Artifacts

Produced during runtime
Name Size Digest
UBSan-logs-default
361 Bytes
sha256:942a7e3390c69a0ee2bf1ab2a555969ffb34f45b8294dd00c59904be2754f1ae
html-ids-head.json.gz
120 KB
sha256:bdfc98aaab96c420c85b716e1b481649bde208e08ae148aa8b6a9f256236e08c