Skip to content

[3.12] gh-148395: Fix a possible UAF in {LZMA,BZ2,_Zlib}Decompressor (GH-148396) #189137

[3.12] gh-148395: Fix a possible UAF in {LZMA,BZ2,_Zlib}Decompressor (GH-148396)

[3.12] gh-148395: Fix a possible UAF in {LZMA,BZ2,_Zlib}Decompressor (GH-148396) #189137

Triggered via pull request April 13, 2026 16:22
Status Cancelled
Total duration 2m 24s
Artifacts

build.yml

on: pull_request
Change detection  /  Create context from changed files
12s
Change detection / Create context from changed files
Matrix: Address sanitizer
Matrix: build-macos
Matrix: build-tsan
Matrix: Ubuntu SSL tests with OpenSSL
Matrix: build-ubuntu
Matrix: build-windows
Docs  /  Docs
1m 55s
Docs / Docs
Docs  /  Doctest
1m 39s
Docs / Doctest
Check if Autoconf files are up to date
31s
Check if Autoconf files are up to date
Check if generated files are up to date
1m 56s
Check if generated files are up to date
Hypothesis tests on Ubuntu
1m 42s
Hypothesis tests on Ubuntu
Check if the ABI has changed
1m 44s
Check if the ABI has changed
All required checks pass
5s
All required checks pass
Fit to window
Zoom out
Zoom in

Annotations

45 errors and 31 warnings
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.3.2)
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.3.2)
The operation was canceled.
Docs / Doctest
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Docs / Doctest
The operation was canceled.
Address sanitizer (ubuntu-24.04)
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Address sanitizer (ubuntu-24.04)
The operation was canceled.
Windows / build and test (x64)
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Windows / build and test (x64)
The operation was canceled.
Ubuntu / build and test (ubuntu-24.04)
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Ubuntu / build and test (ubuntu-24.04)
The operation was canceled.
Thread sanitizer / Thread sanitizer
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Thread sanitizer / Thread sanitizer
The operation was canceled.
Windows / build (arm64)
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Windows / build (arm64)
The operation was canceled.
Hypothesis tests on Ubuntu
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Hypothesis tests on Ubuntu
The operation was canceled.
macOS / build and test (macos-26)
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
macOS / build and test (macos-26)
The operation was canceled.
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.0.15)
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.0.15)
The operation was canceled.
Check if the ABI has changed
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Check if the ABI has changed
The operation was canceled.
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.2.3)
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.2.3)
The operation was canceled.
macOS / build and test (macos-15-intel)
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
macOS / build and test (macos-15-intel)
The operation was canceled.
Docs / Docs
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Docs / Docs
The operation was canceled.
Docs / Docs
Process completed with exit code 2.
Windows / build and test (Win32)
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Windows / build and test (Win32)
The operation was canceled.
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.1.7)
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.1.7)
The operation was canceled.
Check if generated files are up to date
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Check if generated files are up to date
The operation was canceled.
All required checks pass
Process completed with exit code 1.
Tests
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Tests
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Tests
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Tests
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Tests
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Tests
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Tests
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Tests
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Tests
Canceling since a higher priority waiting request for Tests-backport-8fc66ae-3.12-reusable exists
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.3.2)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.3.2): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Address sanitizer (ubuntu-24.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Address sanitizer (ubuntu-24.04)
‘__builtin_strncpy’ output truncated before terminating nul copying as many bytes from a string as its length [-Wstringop-truncation]
Address sanitizer (ubuntu-24.04): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Ubuntu / build and test (ubuntu-24.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Ubuntu / build and test (ubuntu-24.04): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Thread sanitizer / Thread sanitizer
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Hypothesis tests on Ubuntu
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Hypothesis tests on Ubuntu
No files were found with the provided path: .hypothesis/examples/. No artifacts will be uploaded.
Hypothesis tests on Ubuntu: Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
macOS / build and test (macos-26)
openssl@3.0 was installed but not linked because openssl@3 and openssl@3 are already linked. To link this version, run: brew link openssl@3.0
macOS / build and test (macos-26)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-26)
tcl-tk@8 8.6.17 is already installed and up-to-date. To reinstall 8.6.17, run: brew reinstall tcl-tk@8
macOS / build and test (macos-26)
gdbm 1.26 is already installed and up-to-date. To reinstall 1.26, run: brew reinstall gdbm
macOS / build and test (macos-26)
xz 5.8.3 is already installed and up-to-date. To reinstall 5.8.3, run: brew reinstall xz
macOS / build and test (macos-26)
pkgconf 2.5.1 is already installed and up-to-date. To reinstall 2.5.1, run: brew reinstall pkgconf
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.0.15)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.0.15): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Check if the ABI has changed
The `python-version` input is not set. The version of Python currently in `PATH` will be used.
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.2.3)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.2.3): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
macOS / build and test (macos-15-intel)
openssl@3.0 was installed but not linked because openssl@3 and openssl@3 are already linked. To link this version, run: brew link openssl@3.0
macOS / build and test (macos-15-intel)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-15-intel)
tcl-tk@8 8.6.17 is already installed and up-to-date. To reinstall 8.6.17, run: brew reinstall tcl-tk@8
macOS / build and test (macos-15-intel)
gdbm 1.26 is already installed and up-to-date. To reinstall 1.26, run: brew reinstall gdbm
macOS / build and test (macos-15-intel)
xz 5.8.3 is already installed and up-to-date. To reinstall 5.8.3, run: brew reinstall xz
macOS / build and test (macos-15-intel)
pkgconf 2.5.1 is already installed and up-to-date. To reinstall 2.5.1, run: brew reinstall pkgconf
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.1.7)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.1.7): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Check if generated files are up to date
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: hendrikmuhs/ccache-action@5ebbd400eff9e74630f759d94ddd7b6c26299639. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/