Skip to content

[3.13] gh-156002: Bound zipfile decompression for bzip2/LZMA (GH-156003) (GH-156362) #208162

[3.13] gh-156002: Bound zipfile decompression for bzip2/LZMA (GH-156003) (GH-156362)

[3.13] gh-156002: Bound zipfile decompression for bzip2/LZMA (GH-156003) (GH-156362) #208162

Triggered via pull request September 3, 2026 14:45
Status Failure
Total duration 20m 44s
Artifacts 4

build.yml

on: pull_request
Change detection  /  Create context from changed files
12s
Change detection / Create context from changed files
Matrix: Address sanitizer
Matrix: build-macos
Matrix: build-san
Matrix: Ubuntu SSL tests with OpenSSL
Matrix: build-ubuntu
Matrix: build-windows-msi
Waiting for pending jobs
Matrix: build-windows
Matrix: cifuzz
Docs  /  Docs
1m 54s
Docs / Docs
Docs  /  Doctest
5m 59s
Docs / Doctest
Docs  /  Check EPUB
2m 21s
Docs / Check EPUB
Check if Autoconf files are up to date
44s
Check if Autoconf files are up to date
Check if generated files are up to date
4m 55s
Check if generated files are up to date
C API Docs  /  Check if all C APIs are documented
10s
C API Docs / Check if all C APIs are documented
Ubuntu (installed)  /  build, install and test
5m 12s
Ubuntu (installed) / build, install and test
WASI  /  build and test
7m 32s
WASI / build and test
Hypothesis tests on Ubuntu
6m 29s
Hypothesis tests on Ubuntu
Check if the ABI has changed
2m 16s
Check if the ABI has changed
Matrix: build-android
All required checks pass
2s
All required checks pass
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 26 warnings
Docs / Docs
Process completed with exit code 2.
Docs / Check EPUB
Process completed with exit code 1.
Windows / build (arm64): Modules/unicodedata.c#L1568
'function': conversion from 'size_t' to 'int', possible loss of data [D:\a\cpython\cpython\PCbuild\unicodedata.vcxproj]
Check if the ABI has changed
The `python-version` input is not set. The version of Python currently in `PATH` will be used.
Windows (free-threading) / build (arm64): Modules/unicodedata.c#L1568
'function': conversion from 'size_t' to 'int', possible loss of data [D:\a\cpython\cpython\PCbuild\unicodedata.vcxproj]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Ubuntu (installed) / build, install and test: Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Hypothesis tests on Ubuntu
No files were found with the provided path: /home/runner/work/cpython/cpython-builddir/.hypothesis/examples/. No artifacts will be uploaded.
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Modules/_decimal/libmpdec/io.c#L349
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Address sanitizer (ubuntu-24.04): Python/import.c#L1197
‘__builtin_strncpy’ output truncated before terminating nul copying as many bytes from a string as its length [-Wstringop-truncation]
Address sanitizer (ubuntu-24.04): Include/internal/pycore_dict.h#L302
writing 1 byte into a region of size 0 [-Wstringop-overflow=]
Windows / build and test (x64): Modules/unicodedata.c#L1568
'function': conversion from 'size_t' to 'int', possible loss of data [D:\a\cpython\cpython\PCbuild\unicodedata.vcxproj]
Windows (free-threading) / build and test (x64): Modules/unicodedata.c#L1568
'function': conversion from 'size_t' to 'int', possible loss of data [D:\a\cpython\cpython\PCbuild\unicodedata.vcxproj]

Artifacts

Produced during runtime
Name Size Digest
TSan-logs-free-threading
1.78 KB
sha256:926eb3f0885b93471923adc99f3eb811bfb33261a3a55afab25bb226b59aa826
address-artifacts
2.69 KB
sha256:dafd33c8dc9fb62b40d46192be8404a6cc63732edc3ed2765785167db550a6d2
memory-artifacts
7.06 KB
sha256:4ce0ace34b10764fc81769be31f33fb777d0e0d5ec669fab1fb1118ffa1d3b42
undefined-artifacts
7.05 KB
sha256:543f9a2cd8c4fbe044074565daaba91f1b8dce2a60bc6eadf301859aa75c9894